Summary
Summary
More Information
| Included in our products from | July 2000 (3.35) |
|---|---|
| Detected by | All Sophos products |
More Information
- Summary
- More Information
WM97/Resume-A is a worm that emails itself to all people in the user's Outlook address book.
The email has the subject line "Resume - Janet Simons" and the body of the email begins "To: Director of Sales/Marketing, Attached is my resume with a list of references contained within. Please feel free to call or email me..." The infected file is attached to the email.
Should the person receiving the email open the attached file, the worm will then send itself to all the people in their address book.
When the recipient closes the document, the worm deletes the following files:
C:\*.*
C:\My Documents\*.*
C:\WINDOWS\*.*
C:\WINDOWS\SYSTEM\*.*
C:\WINNT\*.*
C:\WINNT\SYSTEM32\*.*
A:\*.*
B:\*.*
D:\*.*
and then all drives through to, and including, Z:\*.*.
The worm also copies itself to C:\WINDOWS\Start Menu\Programs\Startup\Explorer.doc.
|
