"July killer" virus real, but not in English

Published: 12 July 1999 y., Monday
A computer virus that forces users to play a taunting game of Russian roulette - named July killer, because it will delete all files on a user_s c: drive if the current month is July - has been found in Asia. But it will almost certainly cause few problems in the Western hemisphere. It can only infect computers running Microsoft Word in its Chinese or Japanese versions, according to virus company Data Fellows. Security firm Trend Micro Inc. issued a security alert Thursday describing the malicious code as a macro virus which spreads through infected Microsoft Word documents. Once an infected document is opened, according to Trend Micro, the virus checks to see if the current month is July. If it is, the game begins: A dialog box with Chinese text that translates as "A wake up call for the generations" pops up. If the user clicks "OK," a message appears that says, "You are wise, please choose this later again, critically" and "Congratulations." But if the user chooses "Cancel" three times, another message appears: "Stop it! You are so incurable to lose three chances! Now, god will punish you." Then the virus sets out to delete all files on the user_s c: drive, where most consumer store their files. It does this by opening the computer_s autoexec.bat file and adding the line "deltree/y c:\". The next time a user reboots, the PC deletes all files in the c: drive. But only Microsoft Word users exchanging or reading documents in non-English character sets are at risk. To contract the virus, a consumer must either: be using so-called double-byte version a version of Word, one that includes Kanji and other similar character sets; or be using a special "plugin" that enables and English version of Word to render the other character sets. Trend Micro, on its Web site, says the virus is a Chinese virus, and "Unless users are running Chinese Windows or frequently exchange word documents with Chinese Windows users, this virus is not considered an immediate threat."
Šaltinis: MSNBC
Copying, publishing, announcing any information from the News.lt portal without written permission of News.lt editorial office is prohibited.

Facebook Comments

New comment


Captcha

Associated articles

"Goner" Virus Can Use ICQ To Spread

A brand new worm slithering through the Web is getting passed by Microsoft Outlook home and businesses users and is so bad it has the potential of wiping out complete files. more »

Court: U.S. law trumps domain decisions

Decisions by international arbitrators in cybersquatting cases can be challenged in U.S. court, an appeals panel has ruled. more »

Business users victims and villains in Goner outbreak

Business users were the worst offenders in this week's spread of the Goner worm and many firms were slow to update antiviral protection during the outbreak. more »

New Zealand Medical Journal Scraps Paper For Web

Ending 114 years of tradition, one of New Zealand's oldest journals will move entirely to the Web and cease paper publication next year. more »

Internet World Fall 2001 means business

The unrelenting momentum of the Internet as a tool for employing creative and cost-effective new ways of doing business will be the driving theme of next week's Internet World Fall 2001 trade show in New York. more »

PCs Still Rule the E-Commerce Roost

According to research from GartnerG2, as much as 10 percent of the B2C e-commerce transactions in the United States will be done through devices other than the PC by 2005. more »

Mobile Commerce World: Mobiles outstrip landline usage in Sweden

There are now more active mobile-phone users than landline telephone users in Sweden. more »

The first victims

Philippine Hackers Deface Sites To 'Expose Flaws' more »

Memo details Microsoft response in EU case

Microsoft denied European Union (EU) allegations that it violated antitrust rules and misused its dominance of the computer industry. more »

Opera 6.0 for Windows Released

Opera Software has officially released Opera 6.0 for Windows. more »