CNN meldt dat er weer een nieuwe Melissa-achtige worm in de omloop, en net zoals bij Melissa heeft de Worm het gericht op de lekke zachtwaar van ome Bill:
Tentatively called the Worm.ExplorerZip virus, it is propagating itself using the same API as Melissa, and a message stating:"Hi [Name] ! I received your email and I shall send you a reply ASAP. Till then, take a look at the attached zipped docs. bye."
The message comes along with a zip file named Zip_files.exe, which if activated, will show a fake error message to the user.
An executable file will then alter the Win.ini file, instructing the client to run an explorer.exe file which is delivered by the virus in place of the standard operating system when the user reboots. The worm then searches the local file drive for the following file types and deletes them: .c, .cpp, .asm, .doc, .sls, and .ptp, thereby deleting Microsoft Word, Excel, and PowerPoint files.
