Advertisement
Promo

Security threats Toolkit

Talking worm attacks Windows users

Dan Ilet ZDNet.co.uk

Published: 13 Sep 2004 14:00 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

A virus writer has released a worm that speaks to its victims.

The Amus worm uses the Windows Speech Engine, embedded on Windows XP, to play the following message:

"How are you. I am back. My name is mister hamsi. I am seeing you. Haaaaaaaa. You must come to turkiye. I am cleaning your computer. 5. 4. 3. 2. 1. 0. Gule. Gule [bye bye]."

The worm, which runs after the Windows XP boot-up music has played, deletes DLL and INI files to cause Windows to fail. It spreads automatically via an email entitled "Listen and Smile" and alters home page settings on Internet Explorer.

"It might be confusing to users because it says 'I am seeing you'," says Mikko Hypponen, director of antivirus research for F-Secure. "It's the only [worm] I have found speech on, but it is not too advanced because it is written is Visual Basic."

The worm has been rated as low risk by antivirus vendors.

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Did you find this article useful?
79 out of 130 people found this useful


Full Talkback thread

0 comments

Company/Topic Alerts

Create a new alert from the list below:






Video icon

Video

Sentry Posts Blog

Met will not reopen phone hack investi...

The Metropolitan Police will not reopen its investigation into alleged phone hacking by the News of the World. In a press statement delivered outside Scotland Yard on Thursday, Assistant... More

Post a comment

FUD over ChromeOS's security already?

It hasn't taken long for the security vendors to wake to the potential of Google's new ChromeOS. The potential that is, to create FUD – fear uncertainty and doubt. In a release today,... More

Post a comment

Feds take DDoS in their stride

The US Department of Homeland Security has said that a series of distributed denial-of-service attacks began on US government networks on 4 July. However, Amy Kudwa, deputy press... More

Post a comment


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters