Worm Speaks To Windows Users

KingFish

A worm that contains an embedded audio message has been bending the ears of Windows users.

The Amus worm, which may be Turkish, uses the Windows Speech Engine, embedded on Windows XP, to play the following message: "How are you. I am back. My name is Mr. Hamsi. I am seeing you. Haaaaaaaa. You must come to Turkey. I am cleaning your computer. 5. 4. 3. 2. 1. 0. Gule gule." "Gule gule" means "bye-bye" in Turkish. The worm, which runs after the Windows XP boot-up music has played, also deletes certain files, causing Windows to fail. It spreads automatically via an e-mail titled "Listen and Smile" and alters home page settings in Internet Explorer.

Source: c|net

Komete

eww sounds nasty

QCH

Not too nasty but a new approach. It's like having a burglar leave a Video CD in which he has recorded his capper.

"Dear, recently burgled home owner. I have stolen several items, but due to the condition of you house, you may not realize that anything is missing. I have taken the effort to record what was taken and also gone through and critiqued your cleaning abilities (or lack of)....."

But the worm is not written very well, so no biggy...

EyesOnly

In other words. Patch and you're safe?

Justin

Is there a patch?

QCH

No need to patch... the worm is a visual basic worm that is really not a big deal. Don't open the email attachment and your safe. The attachment [may] be called "masum.exe".

McAfee claims that virus DAT from March will kill it. The virus can do some damage if left unchallenged... don't freak. It's just the first virus to use XP's Speech Engine.

Here's the mp3 directly from McAfee http://vil.nai.com/images/w32amus.mp3