WORM_MYPARTY.B - Variant to MYPARTY.A
Source: Trend Micro
Similar to WORM_MYPARTY.A, this variant copies itself to C:RecycledREGCTRL.EXE in Windows 9x. In Windows NT it copies itself to C:REGCTRL.EXE and drops a file named msstask.exe in %windows%profile%username%Start MenuProgramsStartup
It also drops the following file which is only visible in MS-DOS prompt: C:RECYCLERF--- (This is the actual file) Or C:RECYCLEDF---> (This is the actual file)
However, between the system dates of January 20–24, 2002 this file with a random filename will not be dropped at C:RECYCLER nor at C:RECYCLED. This is different from the trigger date of WORM_MYPARTY.A which is January 25–29, 2002.
