|
|
W97M/Cybernet.A Virus Information
Name: W97M/Cybernet.A
Aliases: CyberNet, You've Got Mail
Type: Macro Virus
Date: May 29, 2000
Description:
W97M/Cybernet.A arrives as an infected attachment to an email message.
Subject: "You’ve GOT Mail !!!"
Body: "Please, saved the document after you read and don’t show to anyone else. The document is also VIRUS FREE
so DISREGARD the virus protection warning !!!"
W97M/Cybernet.A is a mass mailing virus, targeting the first 50 address in the user's Outlook address book. The macro virus disables the macro virus security warning in Office 97 and changes the settings to low in Office 2000. Both Word and Excel are affected.
A malicious payload is presented on August 17th and December 25th. On these dates, the virus will attempt to reformat the user's hard drive by modifying the autoexec.bat:
FORMAT C: /AUTOTEST /Q /U
The config.sys file is also modified to prevent user's from cancelling or interrupting the operation.
Detection:
Command AntiVirus v4.58.3 and deffiles dated 05/30/00 provide detection and disinfection for this worm.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Home · Purchase Center · Virus Center · Support Center
|
|
|
