Country Living
Country Living, Country Skills
Country People

KountryLife.com - A Country Living Resource and Community
Community
Message Board
Country Topics
Trading Post
Memory Lane
Country Skills
Country Cooking

Channels
Gardening
Livestock
The Kitchen
Machinery
Tools

Photographs
Photo Gallery
Vintage Photos
Special Collections

Fun
Country Humor
Country Sounds
Coloring Book
Interactive Story

Farm Tractors
Pictures
Tractor Parts
Tractor Manuals

Miscellaneous
Classic Trucks
Antique Tractors
Modern Tractors
Site Map
Links Page
Contact Us

  
Country Discussion Topics
To add your comments to this topic, click on one of the 'Reply' links below.

XP Users
[Return to Topics]

tacon1    Posted 09-14-2004 at 12:39:00       [Reply]  [No Email]


The Amus worm poses less of a threat but is one of the more bizarre worms to have surfaced, security experts said. Spreading via Outlook to e-mails found in the Windows Address Book, the worm arrives with the subject "Listen and Smile" and the body text "Hey. I beg your pardon. You must listen."

If a user executes the attachment, masum.exe, the worm generates a short message in a robotic female voice, using Windows XP's built-in speech capabilities: "How are you. I am back. My name is mister hamsi. I am seeing you. Haaaaaaaa. You must come to turkiye. I am cleaning your computer. 5. 4. 3. 2. 1. 0. Gule. Gule." Finnish security firm F-Secure has archived a sound file of the speech here.

[Pointer] For insights on security coverage around the Web, check out eWEEK.com Security Center Editor Larry Seltzer's Weblog.

"Gule gule" is Turkish for "bye bye," according to an advisory from Sophos Antivirus; hamsi is a small anchovy-like fish found in the Black Sea. The worm also changes the settings of Internet Explorer so that users see the following message (translated from Turkish) as their start page: "Konneting du pepil and dizkoneting you. Means: What difference does it make if you get connected or not. The local line quality is terrible anyway."

The worm isn't all laughs: Among other things it may attempt to delete all INI or DLL files from the Windows folder, depending on the day of the month. Anti-virus vendors refer to Amus as Amus.A, I-Worm.Amus.a, W32/Amus.a@MM and W32/Amus-A, among other aliases.

[Pointer] Check out eWEEK.com's Security Center at http://security.eweek.com for the latest security news, reviews and analysis.


Clod    Posted 09-14-2004 at 16:55:08       [Reply]  [No Email]
Thanks for the info.


[Return to Topics]



[Home] [Search]

Copyright © 1999-2013 KountryLife.com
All Rights Reserved
A Country Living Resource and Community