Welcome to the Virus Encyclopedia of Panda Security.
|Alias:||World Cup, KoreaJapan 2002|
|Effects: ||It displays several windows. If it spreads massively, it can affect the functioning of networks. |
|Detection updated on:||June 25, 2002|
Chick.F is a worm that is easy to recognize because it refers to the matches played in 2002 football World Cup in Korea and Japan.
It spreads rapidly using the following means of transmission:
- E-mail messages with the subject RE: Korea Japan Results, which includes an attached file called KOREAJAPAN.CHM.
- By automatically sending the KOREAJAPAN.CHM file via IRC.
The message text entices the user to open the KOREAJAPAN.CHM file by claiming that it contains information about the World Cup in Korea and Japan. When the file is opened, however, a window is displayed, which informs the user that ActiveX controls must be enabled. If the user clicks on the Yes button in this window Chick.F activates.
Chick.F is not considered dangerous, as its only aim is to spread to other computers. However mass mailing of this virus could cause infected e-mail accounts and IRC chat channels to collapse.
A clear indication that you have received Chick.F is a message with the following characteristics:
RE: Korea Japan Results
Take a look at these results...
The name of the person that has sent the e-mail is included at the end of the message.
Another warning sign is a file called KOREAJAPAN.CHM sentthrough IRC.
When the KOREAJAPAN.CHM file is run, a window is displayed that informs the user that ActiveX controls must be enabled in order to see information about the 2002 World Cup in Korea and Japan. For information on this window and the other windows that appear when infection has been carried out, click here.