VXer targets Romanian gypsy music

Spike · Apr 28, 2005

From The Register:
http://www.theregister.co.uk/2005/04/28/manele-hating_malware/

A mass-mailing virus designed to wipe Romanian gypsy music off PCs is spreading rapidly across the east European country. The virus, dubbed Antiman-A, uses a recent story about the kidnapping of three Romanian journalists - abducted by a little-known terrorist Iraqi group approximately a month ago - to trap curious punters.

The subject line of the infected message is in Romanian and varies from: "Voteaza azi!" ("Vote today"), "Antivirus", "Antimanele" ("Against Gypsy music"), to "Cum a murit Papa?" ("How did the Pope die?"). The message body is also in Romanian, and typically tries to trick users into opening an infected attachment by encouraging them to tackle part in a "virtual poll" concerning the withdrawal of Romanian troops from Iraq or by posing as an anti-virus utility. Once executed, the malicious code erases all files which contain the names of well-known gypsy music singers.

TechSpot

VXer targets Romanian gypsy music

Spike Newcomer, in training