This is the worm virus spreading via the Internet being attached to infected emails. The worm itself is a Windows PE EXE file about 462Kb of length (or about 186Kb in UPX packed form), written in Delphi. The message has following fields: Subject: ANTS Version 3.0 Message body: Hi, Anhängend die neue Version 3.0 von ANTS, dem bislang einzigartigen kostenlosen Trojanerscanner. Zum installieren einfach die angefügte Datei ausführen. Attached you will find the brand new Version 3.0 of ANTS, the unique freeware trojan scanner. To install ANTS simply run the attached setup file. Adieu, Andreas
http://www.ants-online.de Attached filename: ants3set.exe The worm activates from infected email only in case a user clicks on attached file. The worm then installs itself to the system and runs spreading routine.
PC DoorGuard detects and cures "Anset worm" and its clones. The usage is pretty strait- run it and delete any found infected files.
