x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Mywife.C

Threat LevelHigh threatDamageSevereDistributionNot widespread
Common name:Mywife.C
Technical name:W32/Mywife.C.worm
Threat level:Medium
Alias:W32/MyWife.c@MM, I-Worm.Nixen.c
Type:Worm
Effects:  

It blocks the computer and deletes files and entries in the Windows Registry belonging to several antivirus programs. It attempts to search and end processes belonging to antivirus and computer security programs.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

First detected on:Sept. 6, 2004
Detection updated on:Sept. 6, 2004
StatisticsNo
Proactive protection:
Yes, using TruPrevent Technologies

Brief Description 

    

Mywife.C is a worm that spreads via e-mail in a message with variable characteristics.

A few seconds after it is executed, Mywife.C blocks the computer, as it uses all the processor time available.

Mywife.C deletes the files belonging to several antivirus programs, if they are installed in the same directories as the ones specified in the worm's code. It also deletes the entries in the Windows Registry belonging to these antivirus programs, so these applications will not be run automatically the next time Windows is started.

In addition, Mywife.C also deletes the entries belonging to other worms, such as Mydoom.A, Mimail.T and several variants of Bagle.

Mywife.C attempts to search and end the processes belonging to antivirus and computer security programs. This would leave the affected computer vulnerable to the attack of other malware.

Visible Symptoms 

    

Mywife.C is easy to recognize, as it reaches the computer in a message with the following characteristics:

  • Subject: any of the following:
    Sinfonma n: 9 de Beethoven Scherzo
    Historias nuevas Highway Blues
  • Message:
    see the attached
  • Attached file: it is variable. It will have any of the following names, and a TGZ or ZIP extension:
    SINFONMA N: 9 DE BEETHOVEN SCHERZO
    HISTORIAS NUEVAS HIGHWAY BLUES
    It will also attach the file VIDEO01.JPG, which contains a pornographic image.

In addition, Mywife.C carries out the actions below once it has affected the computer:

  • It launches the application Windows Media Player whenever it is executed.
  • It blocks the computer a few seconds after it is executed.