Previous
Panda Software: News: If your computer insults you, it has been infected by the new Cisum.A worm
Added: (Thu Jan 27 2005)
If your computer insults you, it has been infected by the new Cisum.A worm
- This malicious code creates and runs an MP3 audio file that repeats over and over: “you are an idiot.”
CAMBRIDGE, January 27, 2005
PandaLabs has detected the appearance of Cisum.A, a worm whose most distinguishing characteristic is that it insults the user by displaying the following message on screen “YOU ARE AN IDIOT,” while playing an MP3 audio file that repeats the same phrase.
Cisum.A can only spread automatically across computer networks. If a network user runs the file carrying Cisum.A, this worm copies itself under the name ProjectX.exe to the root directory of the shared drives on the computer.
At the same time, it displays a window containing the text: “YOU ARE AN IDIOT,” and constantly plays the aforementioned MP3 audio file the worm has previously generated on the system.
Cisum.A also ends the processes belonging to antivirus programs and other IT security applications, leaving the computer vulnerable to attack from other viruses or hackers. What’s more, it creates several entries in the Windows Registry in order to ensure that it is run whenever the computer starts up.
Even though no incidents caused by this worm have been registered, Panda Software advises users to take precautions with any file they receive or download from the Internet and to update their antivirus software. Panda Software has made the corresponding updates available to its clients to detect and disinfect Cisum.A.
In addition, users can scan their computers online for free with Panda ActiveScan, available at http://www.pandasoftware.com/.
For further information about Cisum.A, visit Panda Software's Virus Encyclopaedia.
About Panda Software's virus laboratory
On receiving a possibly infected file, Panda Software's technical staff get straight down to work. The file is analysed and depending on the type, the action taken may include: disassembly, macro scanning, code analysis etc. If the file does in fact contain a new virus, the disinfection and detection routines are prepared and quickly distributed to users.
For more information: http://www.pandasoftware.com/virus_info/
Andy Mckewan
amckewan@pandasoftware.co.uk
(0)870 444 5640