Sophos

WM97/Melissa

Aliases
  • WM97/Mailissa
  • WM97/Melissa@mm
  • Mid/Melissa
Category
Type
What to do
Prevalence low high

Summary

 
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

WM97/Melissa infects class modules in Word and is Word 2000 aware. Versions of Word prior to Word 97 will not be affected by the Melissa virus. With respect to Word 2000, the virus uses the appropriate new security features to disable Word 2000's macro security warnings.

If, when a document is opened, the minute and the day are the same (for example, the time is 10:05 on 5 March), the virus will insert the text 'twenty-two, plus triple-word-score, plus fifty points for using all my letters. Game's over. I'm outta here.' into the document.

WM97/Melissa sends an email to the first 50 addresses in all of the Address Books accessible by Outlook. This email has the following characteristics:

Subject line: Important Message From <username> (where <username> is taken from the current user information settings)
Message text: Here is that document you asked for ... don't show anyone else ;-)

Accompanying this message is an attachment: a copy of the infected document from which the virus is launched.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer