Haiku Worm.

 Information about the Haiku worm:

Haiku is a Win32 based worm. This worm affects Windows 95, Windows 98 and Windows NT systems. This worms comes as an e-mail message with an attachment called HAIKU.EXE. The e-mail message looks like a forwarded message from the original recepient with the subject "Fw: Compose your own haikus". The content of the message looks like

:))
----- Original Message -----

>"Old pond...
> a frog leaps in
> water's sound."
>- Matsuo Basho.
>
>DO YOU WANT TO COMPOSE YOUR OWN HAIKUS?
>
>Haiku is a small poetry with oriental metric that appeared in the
>XVI century and is being very popular, mainly in Japan and the USA.
>
>It's done to trascend the limitation imposed by the usual language
>and the linear/scientific thinking that treat the nature and the
>human being as a machine.
>
>It usually has 3 lines and 17 syllables distributed in 5, 7 and 5.
>It must register or indicate a moment, sensation, impression or
>drama of a specific fact of nature. It's almost like a photo of
>some specific moment of nature.
>
>More than inspiration, what you need in order to compose a real
>haiku is meditation, effort and perception.
>
>DO YOU WANT TO COMPOSE YOUR OWN HAIKUS?
>
>Now you can! it is very easy to get started in this old poetry
>art. Attached to this e-mail you will find a copy of a simple
>haiku generator. It will help you in order to understand the
>basics of the metric, rhyme and subjects which should be used
>when composing a real haiku... just check it out! it's freeware
>and you can use and spread it as long as you want!

On execution of the attached file, worm copies itself to the Windows directory as HAIKUG.EXE and modifies the file WIN.INI to load itself during the windows startup. Worm will display randomly generated content of a poetry with the title of the message box as Haiku Generator.

This worm scans all the files for e-mail addresses, which are carrying extensions HTM, HTML, RTF, TXT and EML. When a valid e-mail address is found then worm connects to a SMTP server and sends an email as mentioned above with an attachment.

It also downloads a WAV file from the Internet and copies it under C:\ as HAIKU.WAV. After playing this file, it deletes the WAV file.

This Haiku worm first appeared in February 2000.

 Other names of Haiku worm:

This worm is also known as I-Worm.Haiku.

 Removing Haiku worm from your computer:

You can remove this trojan from your computer by using Protector Plus antivirus software.