December 3, 2011

“Teddy Afro” Worm Is Spreading In Ethiopia

Filed under: Ethiopia — ethiopiantimes @ 3:47 pm
Tags: , , , , , ,

A computer worm commonly known as “Teddy Afro” (Worm.Win32.AutoIt.a) is currently spreading in Ethiopia. Follow the following instructions to remove.

Removal Instructions
1) Install any of these Anti-Virus programs:

Kaspersky Anti-Virus
ESET NOD32 Anti-Virus
Avira Anti-Virus (free)
2) Update your virus signatures online.

3) Perform a full system scan.

Although this is a one-step quick fix, lasting security from these infectious agents can only be attained by frequently updating your Anti-Virus programs and constantly being mindful of security threats and their methods of propagation.

It overwrites word, powerpoint, excel, access, mp3 and mpg files with this message:

“I am sorry If I corrupted your files, but it had to be done!

You can’t get your files back because, I have already ruined them!!!

The famous INSA will have solution for your problem!

Proud to be the first Ethiopian Worm!

I know this isn’t fair(corrupting your files), since I don’t know you, you don’t know me.

But the world isn’t fair!

We live in a country which has the slowest internet connection!

In Tibet for $27 a month, you will get 2mbps bandwidth…

In Japan for $30 a month, you will get 100mbps bandwidth where as

In Ethiopia for $200 a month, you get 5kbps bandwidth!!!

And ETC won’t allow any Internet providers since it want to suck your blood alone!!!

We need change…, No!No!No! WE DEMAND CHANGE!!!

……….Bye for Now!!!……….”

Propagation Mechanisms

Spreads using removable drives and network share.

For more information visit



Leave a Comment »

No comments yet.

RSS feed for comments on this post. TrackBack URI

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Blog at

%d bloggers like this: