XTC Worm

 Information about the XTC worm:

XTC is an email worm. This worm infects Windows 95/98 and Windows NT/2000 based systems. The worm arrives through email, bearing subject, "AVX update notification", following as the body text :

"Hi, We would like to notify you about the newest software designed by SOFTWIN company. This program constantly monitors the net for the newest viral treats and anti-virus databases. In the case some new virus is in-the-wild, it will immediatelly ask you to download the newest version of AntiVirus eXpert 2000 (AVX). It's small, it's efficent, it's secure and powerful. No special licence is needed, it's freeware. We hope you enjoy AntiVirus eXpert and share it with your friends.

Best regards,
AVX developement team."

and the attachment being SERVICES.EXE. Opening the infected file attachment launches the worm. This worm searches the "Temporary Internet Files" folder for email addresses. It uses those email addresses to replicate by sending e-mail messages automatically. This worm also has trojan characteristics. It connects through IRC Channels and several FTP location to get updates of its code. It also spreads through network shareable folders. Registry level modifcations are done at the following locations

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

XTC worm first appeared in December 2000.

 Other names of XTC worm:

This worm is also known as I-Worm.XTC, Win32.XTC

 Removing XTC worm from your computer:

You can remove this worm from your computer by using Protector Plus antivirus software.