Melissa
Virus
Information
about Melissa virus:
Melissa
virus makes use of the MAPI functions in
Microsoft Outlook to retrieve the current
user profile and password for server
logon. This Virus grabs the first 50
addresses from the address book of
Microsoft Outlook and resends the mail.
In
Word97, the virus disables the
Tools/Macro menu commands, the Confirm
Conversions option, the MS Word macro
virus protection, and the Save Normal
Template prompt. The virus then checks to
see if the registry key
"HKEY_CURRENT_USER\Software\Microsoft\Office\Melissa?"
contains the value ". . . by
Kwyjibo." This is how the virus
determines whether it has activated on
this system.
The
virus then opens Outlook, if present on
the system, and sends one email for each
address list. The email may contain up to
50 recipients. The email will contain the
subject line: "Important Message
From {user name}" and the message
body will be "Here is that document
you asked for . . . don't show anyone
else :-)" The virus then attaches a
copy of the infected active document to
the outgoing mail. The name of the
original infected attachment was
List.doc, but it could be any name. If
the user does not have Outlook, the virus
will not work. Then the virus modifies
the value of the registry key mentioned
above so it is equal to ". . . by
Kwijibo" -- indicating that it has
successfully activated on this computer.
After
that, the virus checks to see if the
normal template and active document are
infected, and if either is not, it
infects the file. Finally, if the day of
the month is equal to the minute (for
example, if it is March 26 at 3:26 pm),
the virus will type the following text on
the active document: "Twenty-two
points, plus triple-word-score, plus
fifty points for using all my letters.
Game's over. I'm outta here."
Remvoing
Melissa virus from your system:
Fire has
incorporated W97M/Melissa and its
varients into its virus signature file,
with the aim of helping users affected by
this virus attack to detect and eliminate
it from their systems. Fire anti-virus
users can update this signature file by
using online update
facility. It is available with the
registered version of Fire anti-virus
Kit.
A
free download
of FireLite
[ 1100KB]
version is available to detect all kinds
of viruses. Fire anti-virus kit
provides perfect cure for W97M/Melissa.w
virus. If you find this virus,
use registered version of Fire to remove.
To get the registered version of Fire
call us at 044-28170440 or mail
to service@fireav.com
or
purchase Fire online using 
|
.