Welcome to the Virus Encyclopedia of Panda Security.
It deletes key files from the Windows directory and it prevents certain antivirus programs from working properly. It spreads through KaZaA and via the mIRC program.
|First detected on:||July 28, 2003|
|Detection updated on:||March 16, 2005|
Numan is a worm that activates the nineteenth of every month, deleting all the files with a SYS, DLL and COM extension from the Windows directory. By doing this, the computer will stop working properly.
Additionally, Numan searches for directories belonging to several antivirus programs and, once found, it deletes files from those directories.
Numan spreads through the peer-to-peer (P2P) file sharing program KaZaA and via the chat program mIRC.
Numan is easy to recognize once it has affected the computer, as it shows the following symptoms:
- It displays the following message when it is run:
- It activates the nineteenth of every month, displaying the following message on screen: