Welcome to the Virus Encyclopedia of Panda Security.
|Alias:||I-Worm.Sahay, W32/Sahay.worm, PE_SAHAY.A, W32.Sahay.A@mm|
It eliminates the worm Lentin in case the computer is affected by it and restarts the affected computer.
|Detection updated on:||Jan. 15, 2003|
Sahay is a worm that reaches the computer in an e-mail message with the subject Fw: Sit back and be surprised.. and the attached file MATHMAGIC.SCR.
Sahay main aim is to spread to other computers and delete another worm called W32/Lentin.
Once Sahay has affected the computer, it sends itself out to all the contacts in Outlook Address Book.
Sahay is very easy to recognize as it reaches the computer in an e-mail message with the following characteristics:
Fw: Sit back and be surprised..
Think of a number between 1 and 52.
Say it out loud, and keep repeating while you read on.
Think of the name of someone you know (of the opposite sex).
Now count which place in the alphabet, the second letter of that name has.
Add that number to the number you were thinking of.
Say the number out loud 3 times.
Now count which place in the alphabet the first letter of your first name has, and substract that number from the one you just had.
Say it out loud 3 times.
Now sit back, watch the attached slide show, and be surprised..
Sahay restarts the computer once it is affected.