Win32/MyParty

Is a worm spreading via e-mail with the following Subject: new photos from my party! The body of the message is:

Hello!
My party... It was absolutely amazing!
I have attached my web page with new photos!
If you can please make color prints of my photos. Thanks!

The message Attachment (containing the worm body) is a file with the name: www.myparty.yahoo.com (29696 bytes), or myparty.photos.yahoo.com (28160 bytes). After the worm has been activated, the file C:\Recycled\regctrl.exe, is created and executed. Further, the worm is sent via the SMTP serverto all the addresses found the the Address Book and the DBX files. The first variant of the worm is sent between January 25 through 29 while the second one is sent between January 20 through 24.

NOD32 Antivirus system, version 1.206 and higher detects the infiltration.