Macro.Word97.Antisocia
Details
Macro.Word97.Antisocial
Dangerous “Melissa” -like macro virus. It infects documents and global macros area (Normal template) on document closing. This virus also spreads via email in the same way as “Melissa” does: On first infected document opening on a computer the virus attempts to send itself to the first sixty entries from the Outlook address book. The virus’ message has infected document in attachment and:
Subject line: Important Message From
Text: Look what I foundall
After first attempt to send itself via email the virus sets registry key value:
HKEY_CURRENT_USER\Software\Microsoft\Office\Sixtieth Skeptic = “Where’s Jamie?”
Next time the virus checks this key to prevent duplicate sending.
In additional the virus drops its code into file “C:\SS.BAS” and creates Visual Basic Script in file “C:\SS.VBS” that reinfects the Normal template on each system reboot.
Related Posts