Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It displays several windows. If it spreads massively, it can affect the functioning of networks. |
|Detection updated on:||Sept. 20, 2002|
Chick.D is a worm that is easy to recognize because it makes some derogatory comments on Microsoft’s chairman Bill Gates.
It spreads rapidly using the following means of transmission:
- E-mail messages with the subject FWD : The life of bill gates, which includes an attached file called MOCOSOFT.CHM.
- By automatically sending the MOCOSOFT.CHM file via IRC.
The message text entices the user to open the MOCOSOFT.CHM file by claiming that it contains pejorative information about Bill Gates. When the file is opened, however, a window is displayed, which informs the user that ActiveX controls must be enabled. If the user clicks on the Yes button in this window Chick.D activates.
Chick.D is not considered dangerous, as its only aim is to spread to other computers. However mass mailing of this virus could cause infected e-mail accounts and IRC chat channels to collapse.
A clear indication that you have received Chick.D is a message with the following characteristics:
FWD : The life of bill gates
Bill gates, the president of Mocosoft and the man more fuck in the world.
The name of the person that has sent the e-mail is included at the end of the message.
Another warning sign is a file called MOCOSOT.CHM sentthrough IRC.
When the MOCOSOT.CHM file is run, a window is displayed that informs the user that ActiveX controls must be enabled in order to see the information about Bill Gates. For information on this window and the Internet Explorer warning dialog box that is displayed, click here.