You're in: Panda Security > Home Users > security-info > overview
Active Scan. Scan your PC free
Download Cloud Antivirus Gratis

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

NiceHello

Threat LevelHigh threatDamageSevereDistributionNot widespread
Common name:NiceHello
Technical name:W32/NiceHello
Threat level:Medium
Type:Worm
Effects:  It sends out an e-mail message to the virus author, which contains the affected user's MSN Messenger user name and password.
Affected platforms:

Windows XP/2000/NT/ME/98/95

First detected on:March 10, 2003
Detection updated on:Nov. 25, 2003
StatisticsNo
Yes, using TruPrevent Technologies

Brief Description 

    

NiceHello is a worm that does not have any destructive effects, which spreads via e-mail. When it infects a computer, it sends a copy of itself to all the addresses it finds in the Contact List of the instant messaging application MSN Messenger.

Similarly, NiceHello sends an e-mail message to the virus author, which includes the affected user's MSN Messenger user name and password.

NiceHello reaches computers in a file attached to an e-mail message. The attached file will have one of the following names:
CODIGO.EXE, ANIMACION.EXE, PARCHE.EXE, ACTUALIZACION.EXE, DATOS.EXE, PRESENTACIONES.EXE, PARCHEJUEGO.EXE, FOTOS.EXE, VIDEO.EXE or POLITICOS.EXE.

Visible Symptoms 

    

NiceHello is easy to recognize, as it always reaches computers in an e-mail message with specific characteristics.

The body of the message also finishes with the text: es solo para vos 

In order to see the possible characteristics of the message, consult the Means of transmission section.

An indication that NiceHello has infected a computer is the following false warning message, which NiceHello displays when the attached file is run in order to deceive user: