Alias:W97M/Cybernet@mm
Type:Worm 
Size:~ 
Origin: 
Date:05-30-2000 
Damage:Sent by email, to the first 50 addresses found in Outlook 
VDF Version:6.20.00.00 
Danger:Medium 
Distribution:Low 

DistributionAn email sent by the worm has the following structure:

Subject:
You´ve GOT Mail

Body:
Please, saved the document after you read and don´t show to anyone else. The document is also VIRUS FREE... so DISREGARD the Virus protection warning!!!


Technical DetailsIt infects the file "Normal.dot", which is delivered every time a Word document is opened. Then it creates the file "CyberNet.xls" in Excel start directory
"C:ProgrammeMicrosoft OfficeOfficeXLStart"

If the virus is activated on the 17th of August or on the 25th of December, it causes considerable damage to the system.

In the opened Word documents, the worm places random figures and in the Excel spreadsheets, it inserts a number of comments. All these items contain the text "c 2000 - CyberNet From Indonesia".

The virus changes the file "Autoexec.bat", so that the next time drive "C" is called, it will be formatted.

The following comment will also appear:

######################################################
# Vine...Vide...Vice...Moslem Power Never End... #
# I´m Really Sorry, This System Have Been Recycled BY-=CyberNET=-Virus!!! #
# Brought To You From Indonesia... #
#####################################################

Then, a warning message appears on the screen:

Assalamualaikum Li Kulli Muslim...Moslem Power Never End...
Nothing Can Stop > Virus. Your System Has Already Infected !!!
Now...I Am Outta Here...

If you press "OK", Windows is restarted.
Descrizione inserita da Crony Walker su martedì 15 giugno 2004

Indietro . . . .