W97/Resume.A tries to delete all files on harddisk and network.
The worm is hiding in an MS Word Document. It sends itself to all addresses saved in Outlook Address Book.
The email looks like this:
Subject: Resume- Janet Simons
"To: Director of Sales/Marketing,
Attached is my resume with a list of references contained within. Please feel free to call or email me if you have any fyrther questions regarding my experience. I am looking forward to hearing from you.
When the attachment is opened, the worm sends itself to all addresses saved in Outlook Address Book. After the document is closed, the worm copies itself in autostart directory, to be loaded by every system start. Then, the worm begins to delete all files on the harddisk. It also attacks the files from an inserted floppy or from a mapped network drive.
說明撰寫者 Crony Walker 開啟 2004年6月15日星期二