Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It overwrites all the files with an EXE, COM and SCR extension, making them irretrievable.|
|Detection updated on:||Sept. 11, 2003|
Vote.K is a worm with very destructive effects that spreads via e-mail, through the peer-to-peer (P2P) file sharing program KaZaA and via IRC.
When it spreads via e-mail, Vote.K reaches the computer in a message with a subject containing the phrase THE WAR HAS STARTED! and the attached file WTC32.SCR.
Vote.K overwrites all the files with an EXE, COM, SCR, BMP, JPG, RAR, ZIP and WAV extension by replacing them with a copy of itself, which makes them irretrievable.
Vote.K is easy to recognize, as it reaches the computer in an e-mail message with the following characteristics:
It contains the phrase THE WAR HAS STARTED!
In addition, Vote.K displays the following messages on screen once it is run:
- First, it displays this dialog box:
- On pushing the OK button, a new message appears, which in its Titlebar displays the text VICTIM #XXX, where XXX is a number generated at random. The message contains a random text. These are some examples: