x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

Chick.B

 
Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:Chick.B
Technical name:VBS/Chick.B
Threat level:Low
Type:Worm
Effects:  It displays several windows. If it spreads massively, it can affect the functioning of networks.

Affected platforms:

Windows XP/2000/NT/ME/98/95

Detection updated on:June 26, 2002
StatisticsNo
Family:CHICK

Brief Description 

    

Chick.B is a worm that is easy to recognize because it refers to the matches played in 2002 football World Cup in Korea and Japan.

It spreads rapidly using the following means of transmission:

  • E-mail messages with the subject RE: Korea Japan Results, which includes an attached file called KOREAJAPAN.CHM.
  • By automatically sending the KOREAJAPAN.CHM file via IRC.

The message text entices the user to open the KOREAJAPAN.CHM file by claiming that it contains information about the World Cup in Korea and Japan. When the file is opened, however, a window is displayed, which informs the user that ActiveX controls must be enabled. If the user clicks on the Yes button in this window Chick.B activates.

Chick.B is not considered dangerous, as its only aim is to spread to other computers. However mass mailing of this virus could cause infected e-mail accounts and IRC chat channels to collapse.

Visible Symptoms 

    

A clear indication that you have received Chick.B is a message with the following characteristics:

  • Subject:
    RE: Korea Japan Results
  • Message:
    Take a look at these results...Regards,
    The name of the person that has sent the e-mail is included at the end of the message.
  • Attachments:
    KOREAJAPAN.CHM

Another warning sign is a file called KOREAJAPAN.CHM sentthrough IRC.

When the KOREAJAPAN.CHM file is run, a window is displayed that informs the user that ActiveX controls must be enabled in order to see information about the 2002 World Cup in Korea and Japan.