** Virus Alert: W32/Kiray@MM  **

This is a mass-mailing worm which can also delete critical system files. It arrives in an email containing the following information:

Subject: Please make peace not war
Body: The Lamers and Idiots Game
Attachment: Kiray.exe

Executing the attachment infects your system. The worm attempts to send itself to all recipients found in the Outlook Address Book. As the path to the file that is attached is hard coded in the program (c:\windows\temp\kiray.exe), the message may be sent without the worm attached. A registry key value is created to run the worm whenever .EXE files are run:

HKEY_CLASSES_ROOT\exefile\shell\open\command\
(Default)="c:\windows\temp\kiray.exe"

This will prevent any EXE from running as either an error message will be displayed stating that KIRAY.EXE cannot be found, or the virus will be run instead of the desired application. System policies are created by the virus to hide the desktop, hide all drives in My Computer, and disable access to the network control panel.
The virus may also attempt to delete all files in the following directories:

c:\windows
c:\windows\system
c:\Program Files\Microsoft Office
c:\Program Files\Internet Explorer