![]() |
|
The virus infects Microsoft Word 97 documents and spreads itself by sending the infected document as an e-mail attachment using MS Outlook to the first 50 addresses in each address book. The subject line reads "Message From (username)." The text in the body of the message reads "This document is very Important and you've GOT to read this!!!" To avoid infection, do not open mail messages with such subjects lines. Delete them immediately. When the infected document is opened, the virus disables virus protection security settings, conversion confirmation and recently opened file list. In addition, the virus is programmed to trigger on Dec. 25, a Christian holiday. Once triggered, the virus writes a Moslem-related message on the screen, modifies the user's AUTOEXEC.BAT file, and upon reboot, displays a second Moslem-related message.
One indication of a possible Prilissa infection is
a macro warning once an infected document is opened. Another indication
of infection is an increase in size to the global template. Unauthorized
e-mail propagation could also be a sign of infection. Opening
infected documents will also infect the global template "normal.dot."
|
EXPERT ON Y2K VIRUSES:
XML may become
Variant of Melissa virus
Workflow technology seen
Digital printing
Aftermath of Globe's
Telecom-computer
SAP to implement
How to create
|