|
|
||||||||||||||
|
|
W97M/Cybernet.A Virus Information Name: W97M/Cybernet.A
Description: W97M/Cybernet.A arrives as an infected attachment to an email message.
Subject: "You�ve GOT Mail !!!"
W97M/Cybernet.A is a mass mailing virus, targeting the first 50 address in the user's Outlook address book. The macro virus disables the macro virus security warning in Office 97 and changes the settings to low in Office 2000. Both Word and Excel are affected.
A malicious payload is presented on August 17th and December 25th. On these dates, the virus will attempt to reformat the user's hard drive by modifying the autoexec.bat:
FORMAT C: /AUTOTEST /Q /U
The config.sys file is also modified to prevent user's from cancelling or interrupting the operation.
Detection: Command AntiVirus v4.58.3 and deffiles dated 05/30/00 provide detection and disinfection for this worm. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . |
|