This type of worm is embedded in an e-mail attachment, and spreads using the infected computer's e-mailing networks.
Disinfection & Removal
E-mail:W32/Warezov variants are mass-mailing worms that send their worm-code file as e-mail attachments to addresses found on infected computers. The worm attempts to download updated variants from specified website(s) on the Internet.
After the worm's file is run, it shows a message box as a decoy. It installs itself so that it runs when Windows is started.
For more details of the worm's functionalities, see the representative variants listed below: