| Description:
|
Details
Macro.Word97.Waterfall
This macro-virus contains two macros, "AutoOpen" and "autonomailer," in one module "waterfall," and replicates upon document opening.
The virus changes the Internet Explorer Startup URL with the new address: "http://www.kevinmitnick.com". The virus also looks for "Internet Mail" active, creates a new message to one of the addresses from the existing list, attaches an active (infected) document, and sends this message. The message Subject field contains the word "Hey," and the message body contains the strings:
Hey
Youve just got to read this!
Peace
Upon infection, the virus checks the current date and time, and in December, if the current time is 12 minutes past the hour, the virus appends to the AUTOEXEC.BAT file commands displaying the following message:
I have committed the sin of hacking and am unfit in the eyes of the Lord.
I confess to acts of witchcraft and art, dissidence and voodoo.
But in my Craft for which you condemn me,
I SURF THE BRAINWAVES OF GOD. |
