Has anyone ever seen this virus called Bubbleboy?
The virus modifies the Windows registered owner to "BubbleBoy" and organization to "Vandelay Industries".
Then the worm uses ActiveX features to open Outlook and use it to send itself to all recipients in all address books, like the Melissa virus does.
It also adds a key in to the registry to mark that emails has been sent:
HKEY_LOCAL_MACHINE\Software\OUTLOOK.BubbleBoy
and sets its value to:
OUTLOOK.BubbleBoy 1.0 by Zulu
The mass mailing is done only once per infected machine.
Next, the worm will show a message box with the following text:
System error, delete "UPDATE.HTA" from the
startup folder to solve
the problem.