Welcome to the Virus Encyclopedia of Panda Security.
|Alias:||Tam, VBSTamA-m, VBS/Tam, VBS/Tam.A, Tam, Out, I-Worm.Kakworm.d, Tam A, VBS/Out@M, Kak.D, OUT.HTA, TAM.HTA, VBS/Kakworm.D, VBS/Out.A@M|
It displays messages on the screen on August 30, and restarts the affected computer.
|Detection updated on:||June 5, 2003|
Tam.A is a worm that only affects the French version of Windows. On these systems, Tam.A displays a series of windows and restrats the computer, which means that all unsaved information will be lost.
In addition, Tam.A spreads via e-mail, hidden in the AutoSignature of messages sent from the affected computer.
It is very easy to become affected by Tam.A, as it is automatically activated when the message is viewed through Outlook Preview Pane. It does this by exploiting a vulnerability in Internet Explorer (versions 5.01 and 5.5), which allows files attached to e-mail messages to be automatically run.
Tam.A is easy to recognize once it has affected the computer, as on every August 30, it displays a series of messages written in French and restarts the computer:
If the user clicks OK , the worm will display the same message on five occasions.
If no button is clicked in ten seconds, the worm displays the warning message below:
On the contrary, Tam.A displays another window and restarts the computer: