Threat Description

Pikachu

Details

Aliases:Pikachu, Pokey, Pokemon, I-Worm.Pikachu
Category:Malware
Type:Worm
Platform:VB

Summary



The hyped-up 'Pokey' virus doesn't seem to be widespread.

Pikachu is an Internet worm that spreads itself as an executable file attachment using Microsoft Outlook. The worm was written in Visual Basic 6 and it requires VB6 libraries to be present in a system to run.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

You may wish to refer to the Support Community for further assistance. You also may also refer to General Removal Instructions for a general guide on alternative disinfection actions.



Technical Details



The worm usually arrives in an e-mail message that looks like that:

Subject: Pikachu Pokemon
 Body:
 Great Friend!
 Pikachu from Pokemon Theme have some friendly words to say.
 Visit Pikachu at http://www.pikachu.com
 See you.

The worm is attached to this message as the PIKACHUPOKEMON.EXE file. The file has an icon resembling Pikachu character.

When a user clicks on the attachment, the worm is activated. It shows a dialog with Pikachu image and the following text:

Between millions of people around the world i found you.
 Don't forget to remember this day every time MY FRIEND!
 Visit us at http://www.pikachu.com

The dialog that the worm shows upon activation looks like that:

Then the worm accesses Outlook address book and sends messages with its body attached to everyone in this address book.

The worm has a dangerous payload. It adds several commands to AUTOEXEC.BAT file that will delete \Windows\ and \Windows\System\ folders when a system is restarted. A system asks confirmation to delete files, so if a user doesn't press 'Y', his files are not deleted.





Technical Details: Alexey Podrezov, F-Secure, August 2000


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More