Bij ZDNet kwam ik een leuk berichtje tegen over het W97M/Prilissa virus (AKA X-Mas virus) dat zich via Word97 en Outlook verspreidt om vervolgens op 25 december je autoexec.bat aan te passen met format commandos. Ho ho ho wat funny
The virus itself looks for a registry key to verify if the local system has been infected. If it hasn't, the virus creates a Microsoft Outlook e-mail message with the subject line "Message From (Office 97 user name)" and a message body that says "This document is very Important and you've GOT to read this!!!"The first 50 listings from all address books are selected, along with an attachment -- the infected document, whatever it is.
If the date is December 25, the virus runs a destructive payload to overwrite the existing C:/AUTOEXEC.BAT file with instructions to format the C drive.
The virus will not run on Windows NT. Another message is displayed on Word 97, adding:
"You Dare Rise Against Me ... The Human Era is Over, The CyberNET Era Has Come!!!"
Most anti-virus vendors are expected to have a definition update and fix prepared within the next few hours.
It's unclear who will carve the roast beast.