W97M/Pri.Q




  • Download the latest version of Command AntiVirus
  • Get the latest virus definition files
  • Buy Command AntiVirus online


  • Name:W97M/Pri.Q
    Aliases:W97M/Prilissa, W97M.Melissa.W
    Type: Polymorphic macro virus

    Description:

    W97M/Pri.Q is a variant of the Melissa.A virus that infects Word 97 documents, disabling the macro warning feature. It sends an infected e-mail attachment via Microsoft Outlook. Additional payloads are programmed to trigger on December 25, including a reformat of the hard drive on Windows 9.x systems.

    When W97M/Pri.Q is executed, an infected e-mail attachment is mailed to the first 50 addresses in each Microsoft Outlook address book. This action is performed on initial infection only. The infected message displays the following text:

      Subject: "Message from [infected sender name]"

      Message Body: "This document is very Important and you've GOT to read this!!!"

    W97M/Pri.Q checks the system date. If the date is December 25, the virus will perform the following actions:

    1. A messsage box will display the following text:

      "� - CyberNET Vine...Vide...Vice...Moslem Power Never End... You Dare Rise Against Me...The Human Era is Over, The CyberNET Era Has Come!!!
      [OK]"
    2. When the user clicks "OK" to close the box, the document is overlayed with colored shapes.

    3. The virus infects the NORMAL.DOT global template, infecting documents on "Close".

    4. The virus will overwrite C:\AUTOEXEC.BAT, reformatting the hard drive and displaying the following text when the system is rebooted:

      "Vine...Vide...Vice...Moslem Power Never End...
      Your Computer Have Just Been Terminated By
      -=CyberNET=- Virus !!!"
    Detection: Command AntiVirus version 4.57 and higher will detect W97M/Pri.Q with virus definition files (Deffiles) posted 11/19/99.





    Virus Databases Virus Links
    Virus Research Submitting a Virus





    Test
    Drives

    Year
    2000

    Site
    Map

    Customer
    Service

    Press
    Room

    Awards/
    Reviews

    Global
    Resellers

     Home


    Command Software, Inc. Command Software Systems, Inc.
    1061 East Indiantown Road · Suite 500
    Jupiter · FL   33477
    Phone: (561) 575-3200