I-Worm.Win32.Lirva.A spreads itself via email.

Subject :

- Fw: Prohibited customers...
- Re: Brigade Ocho Free membership
- Re: According to Daos Summit
- Fw: Avril Lavigne - the best
- Re: Reply on accou..

I-Worm.Win32.Yaha.44544 was found on 13 March 2003. Its executable file size is 44,544 bytes, and it is compressed using the UPX compressor.
(The uncompressed file size is 98,304 bytes.)

I-Worm.Win32.Yaha.44544 was found on 13 March..

VBS.Merlin is a script virus that spreads itself via emails, mIRC, and mapped network drives.

Upon execution, it creates 500 folders with read-only and hidden attributes.
It deletes all '.doc' files and infects '.vbs' and '.vbe' ..

W97M.Bentbasha.A is a macro virus that triggers the opening or closing of infected or new document.
It will disable the macro protection function.

It opens Notepad and displays the following message on the 7th of every month.