"Teddy Afro" Worm is spreading in EthiopiaDecember 3rd, 2011
A computer worm commonly known as "Teddy Afro" (Worm.Win32.AutoIt.a) is currently spreading in Ethiopia. Follow the following instructions to remove.
1) Install any of these Anti-Virus programs:
ESET NOD32 Anti-Virus
Avira Anti-Virus (free)
2) Update your virus signatures online.
3) Perform a full system scan.
Although this is a one-step quick fix, lasting security from these infectious agents can only be attained by frequently updating your Anti-Virus programs and constantly being mindful of security threats and their methods of propagation.
It overwrites word, powerpoint, excel, access, mp3 and mpg files with this message:
"I am sorry If I corrupted your files, but it had to be done!
You can't get your files back because, I have already ruined them!!!
The famous INSA will have solution for your problem!
Proud to be the first Ethiopian Worm!
.........THE ETHIO WORM!!!.........
I know this isn't fair(corrupting your files), since I don't know you, you don't know me.
But the world isn't fair!
We live in a country which has the slowest internet connection!
In Tibet for $27 a month, you will get 2mbps bandwidth...
In Japan for $30 a month, you will get 100mbps bandwidth where as
In Ethiopia for $200 a month, you get 5kbps bandwidth!!!
And ETC won't allow any Internet providers since it want to suck your blood alone!!!
We need change..., No!No!No! WE DEMAND CHANGE!!!
..........Bye for Now!!!.........."
Spreads using removable drives and network share.
For more information visit http://security.insa.gov.et