KingFish
27 Jan 2005, 4:04am
Internet users infected with a virus may not feel particularly brilliant, but a new worm reported by PandaLabs will actually tell them they're not.
The W32/Cisum.A worm displays the message "YOU ARE AN IDIOT" while repeating an MP3 with the same phrase every five seconds. Beyond audibly berating its victims, the Cisum worm also targets security programs, including firewalls and anti-virus programs, and shuts them down.
The worm also looks for and shuts down instances of the Netsky and Bagle worms that may be present on a user's PC.
Cisum is spread automatically across a user's network by copying a file to the root directory of local and mapped network drives. PandaLabs considers the distribution mechanism of the worm as one of the reasons why it hasn't spread far.
"As this worm is designed primarily to spread on a network environment, we won't see a big distribution on consumer machines," Patrick Hinojosa, CTO of Panda Software U.S., told internetnews.com. "If this is sent as a component of an e-mail-borne threat we will start to see wider distribution."
Source: Internet News (http://www.internetnews.com/security/article.php/3464731)
The W32/Cisum.A worm displays the message "YOU ARE AN IDIOT" while repeating an MP3 with the same phrase every five seconds. Beyond audibly berating its victims, the Cisum worm also targets security programs, including firewalls and anti-virus programs, and shuts them down.
The worm also looks for and shuts down instances of the Netsky and Bagle worms that may be present on a user's PC.
Cisum is spread automatically across a user's network by copying a file to the root directory of local and mapped network drives. PandaLabs considers the distribution mechanism of the worm as one of the reasons why it hasn't spread far.
"As this worm is designed primarily to spread on a network environment, we won't see a big distribution on consumer machines," Patrick Hinojosa, CTO of Panda Software U.S., told internetnews.com. "If this is sent as a component of an e-mail-borne threat we will start to see wider distribution."
Source: Internet News (http://www.internetnews.com/security/article.php/3464731)