Bij ZDNet kwam ik een leuk berichtje tegen over het W97M/Prilissa virus (AKA X-Mas virus) dat zich via Word97 en Outlook verspreidt om vervolgens op 25 december je autoexec.bat aan te passen met format commandos. Ho ho ho wat funny ![]()
The virus itself looks for a registry key to verify if the local system has been infected. If it hasn't, the virus creates a Microsoft Outlook e-mail message with the subject line "Message From (Office 97 user name)" and a message body that says "This document is very Important and you've GOT to read this!!!"The first 50 listings from all address books are selected, along with an attachment -- the infected document, whatever it is.
If the date is December 25, the virus runs a destructive payload to overwrite the existing C:/AUTOEXEC.BAT file with instructions to format the C drive.
The virus will not run on Windows NT. Another message is displayed on Word 97, adding:
"You Dare Rise Against Me ... The Human Era is Over, The CyberNET Era Has Come!!!"
Most anti-virus vendors are expected to have a definition update and fix prepared within the next few hours.
It's unclear who will carve the roast beast.