citerar: W32.Mari@mm is a mass-mailing worm written in the Visual Basic language. If VB runtime libraries are not present on the system, the worm will not execute.
When the worm is executed, it does the following:
1. It create a copy of itself in the Windows or Winnt folder as System32.exe.
2. It adds the following lines to the Win.ini file: