Haiku Worm.
Information
about the Haiku worm:
Haiku is a Win32 based worm. This worm
affects Windows 95, Windows 98 and Windows NT systems. This worms comes
as an e-mail message with an attachment called HAIKU.EXE. The e-mail message
looks like a forwarded message from the original recepient with the subject
"Fw: Compose your own haikus". The content of the message
looks like
:))
----- Original Message -----
>"Old pond...
> a frog leaps in
> water's sound."
>- Matsuo Basho.
>
>DO YOU WANT TO COMPOSE YOUR OWN HAIKUS?
>
>Haiku is a small poetry with oriental metric that appeared in the
>XVI century and is being very popular, mainly in Japan and the USA.
>
>It's done to trascend the limitation imposed by the usual language
>and the linear/scientific thinking that treat the nature and the
>human being as a machine.
>
>It usually has 3 lines and 17 syllables distributed in 5, 7 and 5.
>It must register or indicate a moment, sensation, impression or
>drama of a specific fact of nature. It's almost like a photo of
>some specific moment of nature.
>
>More than inspiration, what you need in order to compose a real
>haiku is meditation, effort and perception.
>
>DO YOU WANT TO COMPOSE YOUR OWN HAIKUS?
>
>Now you can! it is very easy to get started in this old poetry
>art. Attached to this e-mail you will find a copy of a simple
>haiku generator. It will help you in order to understand the
>basics of the metric, rhyme and subjects which should be used
>when composing a real haiku... just check it out! it's freeware
>and you can use and spread it as long as you want!
On execution of the attached file,
worm copies itself to the Windows directory as HAIKUG.EXE and modifies
the file WIN.INI to load itself during the windows startup. Worm will display
randomly generated content of a poetry with the title of the message box
as Haiku Generator.
This worm scans all the files for e-mail addresses, which are carrying
extensions HTM, HTML, RTF, TXT and EML. When a valid e-mail
address is found then worm connects to a SMTP server and sends an email
as mentioned above with an attachment.
It also downloads a WAV file from the Internet
and copies it under C:\ as HAIKU.WAV. After playing this file, it deletes
the WAV file.
This Haiku worm first appeared in February
2000.
Other
names of Haiku worm:
This worm is also known as I-Worm.Haiku.
Removing
Haiku worm from your computer:
You can remove this trojan from your computer
by using Protector Plus antivirus software.
Click
here to download a 30 day Evaluation Copy of Protector Plus for your operating system
|