x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Amus.A

Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:Amus.A
Technical name:W32/Amus.A.worm
Threat level:Low
Type:Worm
Effects:  

It deletes DLLs and INI files on certain dates. It spreads via e-mail.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

First detected on:Aug. 5, 2004
Detection updated on:April 20, 2005
StatisticsNo

Brief Description 

    

Amus.A is a worm that on certain dates deletes DLLs (Dynamic Link Library) or INI files, or changes the default home page address to the following text:

Konneting du pepil and dizkoneting you. Anlami: Baglansan ne olacak, baglanmasan ne olacak. Zaten hatlar burada rezalet.

Translation: Connecting to "pepil" and disconnecting you. Does not matter to connect to or not to connect. The connection is terrible here.

Amus.A spreads via e-mail, in a message with the subject Listen and Smile and the attached file MASUM.EXE.

On Windows XP computers, Amus.A attempts to use their Speech Engine in order to emit the following message:

How are you. I am back. My name is mister hamsi. I am seeing you. Haaaaaaaa. You must come to turkiye. I am cleaning your computer. 5. 4. 3. 2. 1. 0. Gule. Gule.

Note: hamsi is a kind of fish similar to anchovy, while gule means bye.

Visible Symptoms 

    

Amus.A is easy toe recognize before it affects the computer, as it reaches the computer in a message with the following characteristics:

  • Subject:
    Listen and Smile.
  • Message:
    Hey. I beg your pardon. You must listen.
  • Attachments:
    MASUM.EXE

Once it has been executed, Amus.A creates a small white square on the left top corner of the Windows Desktop.

On Windows XP computers, Amus.A attempts to use their Speech Engine in order to emit a message.