Talking Windows virus chats while it deletes files

Malware writer speaks - literally

A virus writer has released a worm that speaks to its victims.

The Amus worm uses the Windows Speech Engine, embedded on Windows XP, to play the following message:

"How are you. I am back. My name is mister hamsi. I am seeing you. Haaaaaaaa. You must come to turkiye. I am cleaning your computer. 5. 4. 3. 2. 1. 0. Gule. Gule [bye bye]."

The worm, which runs after the Windows XP boot-up music has played, deletes DLL and INI files to cause Windows to fail. It spreads automatically via an email entitled "Listen and Smile" and alters home page settings on Internet Explorer.

"It might be confusing to users because it says 'I am seeing you'," says Mikko Hypponen, director of antivirus research for F-Secure. "It's the only [worm] I have found speech on but it is not too advanced because it is written is Visual Basic."

Dan Ilett writes for ZDNet UK