"July killer" virus real, but not in English

Published: 12 July 1999 y., Monday
A computer virus that forces users to play a taunting game of Russian roulette - named July killer, because it will delete all files on a user_s c: drive if the current month is July - has been found in Asia. But it will almost certainly cause few problems in the Western hemisphere. It can only infect computers running Microsoft Word in its Chinese or Japanese versions, according to virus company Data Fellows. Security firm Trend Micro Inc. issued a security alert Thursday describing the malicious code as a macro virus which spreads through infected Microsoft Word documents. Once an infected document is opened, according to Trend Micro, the virus checks to see if the current month is July. If it is, the game begins: A dialog box with Chinese text that translates as "A wake up call for the generations" pops up. If the user clicks "OK," a message appears that says, "You are wise, please choose this later again, critically" and "Congratulations." But if the user chooses "Cancel" three times, another message appears: "Stop it! You are so incurable to lose three chances! Now, god will punish you." Then the virus sets out to delete all files on the user_s c: drive, where most consumer store their files. It does this by opening the computer_s autoexec.bat file and adding the line "deltree/y c:\". The next time a user reboots, the PC deletes all files in the c: drive. But only Microsoft Word users exchanging or reading documents in non-English character sets are at risk. To contract the virus, a consumer must either: be using so-called double-byte version a version of Word, one that includes Kanji and other similar character sets; or be using a special "plugin" that enables and English version of Word to render the other character sets. Trend Micro, on its Web site, says the virus is a Chinese virus, and "Unless users are running Chinese Windows or frequently exchange word documents with Chinese Windows users, this virus is not considered an immediate threat."
Šaltinis: MSNBC
Copying, publishing, announcing any information from the News.lt portal without written permission of News.lt editorial office is prohibited.

Facebook Comments

New comment


Captcha

Associated articles

What impact will sites like Facebook and YouTube have in the EP elections?

Networking sites like Facebook and YouTube are changing politics. more »

Santander Selects Wincor Nixdorf for its ATMs

Vendor to service almost 4,000 existing ATMs and supply another 450. more »

WINCOR: Check 21, deposit automation will revolutionize the branch

The advent of deposit automation, facilitated in many ways by the implementation of Check 21, is not only improving check-handling processes at the self-service terminal – it also is improving handling within the bank branch itself. more »

Moroccan Post Office chooses Bull

The Moroccan Post Office, Barid Al-Maghrib, has selected Bull to act as project manager on the automation project for its International Mail Center in Casablanca. more »

Gemalto Wins Austin Business Journal Tech Innovation Award

Gemalto has taken home one of the most coveted technology prizes in Austin with its Smart Enterprise Guardian (SEG). more »

So-called 'bam-raids' on Aussie ATMs get bankers' attention

Banks in Australia are rushing to install gas detectors into their ATMs, as gas-explosive attacks on ATMs in the country continue to climb. more »

EMC and Microsoft Extend Strategic Alliance Through 2011

EMC CEO Joe Tucci and Microsoft CEO Steve Ballmer showcase deep technology collaboration at New York CIO Summit. more »

Gemalto and mChek Join Forces to Serve Mobile Payment Markets in South Asia

India-based mChek looks to offer its secured SIM-card-based mobile applications through partnership with Gemalto. more »

Heartland Payments CEO says end-to-end encryption could prevent card, data breaches

Nearly one week after news emerged of the big data breach at Princeton, N.J.-based merchant acquirer Heartland Payment Systems Inc., it remains unclear how much damage actually happened and who did it. more »

Wincor Nixdorf launches new ATM tech that shields ATMs from attacks

Wincor Nixdorf AG has announced the release of an enhanced security product for bank branches called ProTect. more »