Parrot can arrive on through email or an IRC channel.
When Parrot is executed, it places a copy of itself named parrot.scr in the root of the C: drive.It also places the files msg.vbs, winstart.bat, parrot.scr, parrot.mp3 and hello.mp3 in the Windows directory. It creates the file script.ini in the folder where mIRC is installed. It also infects system files and when one is run, the virus plays the parrot.mp3 file, which says
Hi there, I am Parrot, the talking virus, written by Gigabyte.
It adds msg.vbs as a value of the local machine run once key and hello.mp3 as a value of the run key. Therefore the message runs once after infection and the hello file runs every time the computer starts, where msg.vbs displays a message box with a rude message about Sophos technology consultant Graham Cluley, and hello.mp3 plays the spoken first two lines of the message followed by the second verse of "Pizzaman", a hard house music, by Cisco Kid. (The words heard in the .mp3 file are the same as those in the message box.) Every time the system starts, it briefly displays the text:
You're infected with Parrot, the talking virus, by Gigabyte/Metaphase
Parrot has some viral charactaristics, "infecting" executable files. It makes a copy of the original executable, but changes the extension to .prt. It then copies itself as the original file's name. When the infected user joins an IRC channel, it sends a copy to everyone logged on that channel.
- Virus Encyclopaedia Full Name:Worm/Win32/Email/Parrot
In 2001, Sophos senior technology consultant Graham Cluley referred to virus coders as spotty teenage nerds, drawing the ire of much of the community. One of the few female virus coders, a young woman from Belgium started a personal feud against Cluley. Parrot was the first in a series of worms and viruses either attacking Cluley or at least mentioning him. Others include Coconut and Quizy.
ESET Antivirus, Parrot.A
John Leyden. The Register, Sex starved virus writers go for revenge. 2001.08.03