GEN:SID 1:772
Message Virus - Possible PrettyPark Trojan
Summary This event is generated when the PrettyPark virus attempts to spread.
Impact Possible virus infection. Attempt to spread a virus/trojan.
Detailed Information Prettypark is a Win32 based Internet worm. This spreads through the Internet by attaching itself to email messages.

When the attached file is executed, it checks for the existence of Prettypark in memory, if it is not present it then installs Prettypark. After infecting it sends messages to all the email addresses listed in the address book with an attachment containing the virus.

Prettypark is capable of revealing passwords and connects to IRC channels. System access is possible.
Affected Systems Windows 95, 98 and NT
Attack Scenarios This is virus propogation activity.
Ease of Attack Simple.
Corrective Action Use an Anti-Virus tool to remove it.
Additional References http://www.nwinternet.com/~pchelp/bo/prettypark.htm
Rule References MCAFEE: 10175