TROJ_FIX2001 is an email worm, that claims to fix the Y2K Internet Connection problem. However, instead of performing a system check, TROJ_FIX2001 copies itself to the Windows system folder and modifies the Windows registry. Once an infected system is rebooted, TROJ_FIX2001 starts to spread itself in a second email, which follows every outgoing message.

It presents itself in both English and Spanish.

Once executed, it copies itself to the Windows System folder and modifies the Registry to control your e-mail. It then pops up a "Y2K Ready!!" message box displaying "Your Internet Connection is already Y2K, you dont need to upgrade it."

When the computer is rebooted, all outgoing mails will be followed by another message with this Trojan as an attachment. The e-mail has the subject,
"Internet problem year 2000" from
"Administrator {admin_".

The message body contains: (in English)

Internet Customer:
We will be glad if you verify your Operative System(s) before Year 2000 to avoid problems with your Internet Connections. If you are a Windows 95/98 user, you can check your system using the Fix2001 application that is attached to this E-Mail or downloading it from Microsoft (C) WEB Site: HTTP://WWW.MICROSOFT.COM. If you are using another Operative System, please dont wait until Year 2000, ask your OS Technical Support.

Thanks.
Administrator.
"THE REAL KEY TO LIVE A HAPPY LIFE, IS: BE A GOOD MAN."
 

The message body contains: (in Spanish)

Estimado Cliente:
Rogamos actualizar y/o verificar su Sistema Operativo para el correcto funcionamiento de Internet a partir del A o 2000. Si Ud. Es
usuario de Windows 95/98 puede hacerlo mediante el Software provisto por Microsoft © llamado –Fix2001- que se encuentra adjunto en este E-Mail o bien puede ser descargado del sitio WEB de Microsoft © HTTP://WWW.MICROSOFT.COM Si Ud. Es usuario de otros Sistemas Operativos, por favor, no deje de consultar con sus respectivos soportes tecnicos.

Muchas Gracias.
Administrador.
"PARA CONSEGUIR LA VERDADERA FELICIDAD, SE UN BUEN TIPO."