"July killer" virus real, but not in English

Published: 12 July 1999 y., Monday
A computer virus that forces users to play a taunting game of Russian roulette - named July killer, because it will delete all files on a user_s c: drive if the current month is July - has been found in Asia. But it will almost certainly cause few problems in the Western hemisphere. It can only infect computers running Microsoft Word in its Chinese or Japanese versions, according to virus company Data Fellows. Security firm Trend Micro Inc. issued a security alert Thursday describing the malicious code as a macro virus which spreads through infected Microsoft Word documents. Once an infected document is opened, according to Trend Micro, the virus checks to see if the current month is July. If it is, the game begins: A dialog box with Chinese text that translates as "A wake up call for the generations" pops up. If the user clicks "OK," a message appears that says, "You are wise, please choose this later again, critically" and "Congratulations." But if the user chooses "Cancel" three times, another message appears: "Stop it! You are so incurable to lose three chances! Now, god will punish you." Then the virus sets out to delete all files on the user_s c: drive, where most consumer store their files. It does this by opening the computer_s autoexec.bat file and adding the line "deltree/y c:\". The next time a user reboots, the PC deletes all files in the c: drive. But only Microsoft Word users exchanging or reading documents in non-English character sets are at risk. To contract the virus, a consumer must either: be using so-called double-byte version a version of Word, one that includes Kanji and other similar character sets; or be using a special "plugin" that enables and English version of Word to render the other character sets. Trend Micro, on its Web site, says the virus is a Chinese virus, and "Unless users are running Chinese Windows or frequently exchange word documents with Chinese Windows users, this virus is not considered an immediate threat."
Šaltinis: MSNBC
Copying, publishing, announcing any information from the News.lt portal without written permission of News.lt editorial office is prohibited.

Facebook Comments

New comment


Captcha

Associated articles

The "End of MIR"

ParallelGraphics Web3D project tracks MIR's Final Journey Back more »

A big boost

Norwegians to Implement Largest-Ever E-Business Project more »

Airline Industry Study Defends Orbitz Project

Orbitz - the airline industry's embattled Internet-ticketing project - will strengthen rather than stifle competition in the travel industry, according to a new report commissioned by Orbitz. more »

The sirens are wailing for tougher security standards

A World Wide Web of Organized Crime An Eastern European ring may have lifted over a million credit-card numbers from the Net. more »

Hacker updates Anna virus tool

Software can now produce encrypted worms more »

ICANN: Monopoly Furor Follows Twomey Appointment

After opening its quarterly forum to public input, the International Corporation for Assigned Names and Numbers (ICANN) has been criticized for protecting the monopoly of US domain name registrar VeriSign more »

Firm to Air Online Security Tool for FBI

For the past year, Eastern European-based hackers have been systematically exploiting known Windows NT vulnerabilities to steal customer data, according to reports from the FBI and SANS Institute. more »

Internet Appliances Next Step for Wired Households

Despite a slow start, the Internet appliance market is poised to grow dramatically, with shipments of more than 174 million units expected by 2006 more »

search.lt news

search.lt presents newest links more »

ICANN: TLD Threat? What Threat?

An Internet startup that plans to create its own top-level domain names is likely to cause bigger trouble for Web surfers than for the Internet Corporation for Assigned Names and Numbers, ICANN officials say. more »