What is the Killer
Resume Virus?
| Attack of the Killer Resume sounds more like a
bad 'B' movie than a virus that could destroy your computer, but it
does have the ability to do just that if you're not careful. The
"Killer Resume" virus is similar to the Melissa macro virus that spread
across the world in 1999.
Released
on May 26th, 2000, a Word macro virus spreading via email using
Microsoft Outlook was released. Once triggered, the virus deletes files
and sends itself out via email to all address listed in the address
book using Microsoft Outlook. The email has the subject line "Resume -
Janet Simons" and the attachment called "Explorer.doc", which contains
the macro virus. The attachment could also be name resume.doc or many
other names.
|
|
When the
user closes the infected file, the virus attempts to delete files in
the following directories:
C:\*.*
(deletes all files in root directory)
C:\My Documents\*.* (deletes all files in My Documents directory)
C:\WINDOWS\*.* (deletes all files in the Windows directory -- leaving
the computer unusable)
C:\WINDOWS\SYSTEM\*.* (deletes all files in the Windows System
directory -- leaving the computer unusable)
C:\WINNT\*.* (similar to the Windows lines, this line targets Windows
NT files)
C:\WINNT\SYSTEM32\*.* (again, targeting all files in the WindowsNT
System32 directory)
It also
continues to attempt to delete all files in the root directory of drive
A, B, D....up to drive Z.
How Can I Protect Myself?
Since its a
Microsoft Word Macro Virus, the answer is simply. First, don't open any
attachments that you don't have to, and secondly follow the
instructions below to Enable Macro Virus Protection in Word which will
warn you if a document contains macros. Macros are small programs
designed to improve the speed and efficiency of a document by combining
multiple tasks into one and running them all at once, however they pose
a grave risk in security. Don't run macros.
To
Enable Macro Virus Protection in MS Word
1) In
Microsoft Word, Click on Tools
2) Click on Options
3) Click on General
4) Check the box labeled Macro Virus Protection
Also update your virus signatures in
your anti-virus software, check EVERY attachment with
anti-virus software before opening, and read more about viruses and how
to protect yourself in the
PC HELL VIRUS CENTER
|
Tools for Removing Spyware, Adware, and Malware
PC HELL
Other Pages
Spyware/Adware Removal Help
MSBlast.exe Worm Removal
Welchia (Dllhost.exe and SVCHost.exe) Worm Removal
Uninstall McAfee Instructions
Uninstall Norton Instructions
Uninstall Avast Instructions
Uninstall AVG Instructions
Uninstall Antivir Instructions
Uninstall Panda Instructions
How to Manually Run the Microsoft Malicious Software Removal Tool
Bloodhound.Exploit.6 Virus Removal
MyDoom Virus Removal
MiMail.C Virus Removal
Swen Worm Virus Removal
SoBig.F Worm Removal
Dumaru Virus Removal
BugBear.B Worm Removal
SoBig.E Worm Removal
Pop Up Ad Removal Info
KAK Worm Removal
MiMail.A Worm Removal
W95.MTX Virus Removal
Snow White Virus Removal
BadTrans Trojan Removal
Wininit Virus (Bymer Trojan)
Happy99 Worm Removal
VBS Netlog Worm Removal
Pretty Park Worm Removal
Sasser Worm Virus Removal
Backdoor SDBot.H Trojan Removal
VBS.Loveletter Help
Computer Security Information
Back Orifice Information
PC HELL Main Page
iPadastic - News, Tutorials, Help, Tips, and Hints for the iPad
Download Hoyle Games including Casino 3D, Card, Board, and Solitaire games.
|