Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
If we do not hit our goal we will be forced to close the site.

Current status: https://keepboardsalive.com/

Annual subs are best for most impact. If you are still undecided on going Ad Free - you can also donate using the Paypal Donate option. All contribution helps. Thank you.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.

IRC Virus please read

  • 20-01-2001 01:38AM
    #1
    Registered Users, Registered Users 2 Posts: 4,015 ✭✭✭


    Name: WM97/Story-AD
    Type: Word 97 macro virus
    Date: 19 January 2001

    Will be detected by Sophos Anti-Virus March 2001 (3.43) or
    later. A virus identity (IDE) file is available for earlier
    versions.

    At the time of writing Sophos has received just one report of
    this virus from the wild.

    Description:

    WM97/Story-AD is a variant of the WM97/Story Word macro virus.

    If C:\MIRC\MIRC32.EXE exists WM97/Story-AD will delete the file
    SCRIPT.INI from the C:\MIRC subdirectory.

    It will then write a new SCRIPT.INI file containing the
    mIRC/Story virus.

    The active document within Word will be saved as
    C:\WINDOWS\STORY.DOC if it does not already exist.

    mIRC/Story will send the infected Word document
    C:\WINDOWS\STORY.DOC to the currently connected IRC (Internet
    Relay Chat) channel.

    The script then sends boastful messages to various email
    addresses.


    Download the IDE file from
    http://www.sophos.com/downloads/ide/story-ad.ide

    Read the analysis at
    http://www.sophos.com/virusinfo/analyses/wm97storyad.html

    Download a ZIP file containing all the IDE files available for
    the current version of Sophos Anti-Virus from
    http://www.sophos.com/downloads/ide/ides.zip

    Read about how to use IDE files at
    http://www.sophos.com/downloads/ide/using.html


    Ciaran Sutcliffe
    aka: sutty
    [HIV]sutty
    For a good time goto:
    http://www.hotinternetvirgins.com


Advertisement