Information about the CyberNet.A:
This is a macro virus with worm characteristics infecting Word 97, Excel 97 and Office 2000 documents. This virus comes as an email attachment with a subject "You’ve GOT Mail !!!" and the content of the mail would be :
"Please, saved the document after you read and don’t show to anyone else. The document is also VIRUS FREE… so DISREGARD the virus protection warning !!!"
The macro virus infects the NORMAL.DOT of MS-Word and creates a file CYBERNET.XLS under XLSTART folder. It mails an infected file as an attachment to the first 50 addresses found in the address book automatically.
It overwrites the AUTOEXEC.BAT with FORMAT C: /AUTOTEST /Q /U, with the text below
##########################################
# Vine...Vide...Vice...Moslem Power Never End... #
# I'm Really Sorry, This System Have Been Recycled By -= CyberNET =- Virus!!! #
# Brought To You From INDONESIA... #
##########################################
and CONFIG.SYS with the instructions AUTOEXEC.BAT: SWITCHES=/N.
It also has the payload of inserting random shapes and figures into the documents which are already opened. It is set to trigger on August 17 and December 25.
The CyberNET.A macro virus first appeared in May 2000
Other names of CyberNet.A:
This macro virus is also known as CyberNet, XL97/CyberNet.A
No comments:
Post a Comment