Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

IRC Virus please read

  • 20-01-2001 1:38am
    #1
    sutty
    Registered Users, Registered Users 2 Posts: 4,109 ✭✭✭


    Name: WM97/Story-AD
    Type: Word 97 macro virus
    Date: 19 January 2001

    Will be detected by Sophos Anti-Virus March 2001 (3.43) or
    later. A virus identity (IDE) file is available for earlier
    versions.

    At the time of writing Sophos has received just one report of
    this virus from the wild.

    Description:

    WM97/Story-AD is a variant of the WM97/Story Word macro virus.

    If C:\MIRC\MIRC32.EXE exists WM97/Story-AD will delete the file
    SCRIPT.INI from the C:\MIRC subdirectory.

    It will then write a new SCRIPT.INI file containing the
    mIRC/Story virus.

    The active document within Word will be saved as
    C:\WINDOWS\STORY.DOC if it does not already exist.

    mIRC/Story will send the infected Word document
    C:\WINDOWS\STORY.DOC to the currently connected IRC (Internet
    Relay Chat) channel.

    The script then sends boastful messages to various email
    addresses.


    Download the IDE file from
    http://www.sophos.com/downloads/ide/story-ad.ide

    Read the analysis at
    http://www.sophos.com/virusinfo/analyses/wm97storyad.html

    Download a ZIP file containing all the IDE files available for
    the current version of Sophos Anti-Virus from
    http://www.sophos.com/downloads/ide/ides.zip

    Read about how to use IDE files at
    http://www.sophos.com/downloads/ide/using.html

    Ciaran Sutcliffe
    aka: sutty
    [HIV]sutty
    For a good time goto:
    http://www.hotinternetvirgins.com


Advertisement