White Papers
W97M.Cerin.A (Symantec)
Overview
Date: October 31, 2001
Name: W97M.Cerin.A
Also Known As: W97M/Cerin.A
Discovered on: October 29, 2001
Last Updated on: October 31, 2001 at 10:30:13 AM PST
W97M.Cerin.A is a macro virus that infects Microsoft Word documents and templates. The macro has a date-activated payload that consists of displaying a message box, as well as inserting text into and password protecting any infected document. Once a document is password protected, it cannot be edited until the document is unprotected. Unprotecting the infected documented is difficult, because the password created during infection is randomly generated.
Type: Macro, Virus
Threat Assessment: Low
Payload Trigger: April 6th, July 31st
Payload: Password protect documents, text insertion.
Modifies files: Yes
Compromises security settings: Yes
Technical description: When the virus is executed, it lowers the macro security settings for Microsoft Office 97 and Office 2000 by modifying a registry key.
On April 6 or July 31, this virus performs the following actions:
It displays the message:
I Love You and Hate You
You've given so much pleasure,
And caused so much pain.
Now to share the wealth!!
It inserts lyrics from the song "Glycerine" (by the music group Bush) into the infected document.
It protects the newly infected document with a password that begins with the letter "c" followed by a random number between 2 and 2001.
| Publisher | Symantec | File Format | HTML |
|---|---|---|---|
| Date Published | October 2001 | Downloads | 2 |
| Format | White Papers | ||
| Topics |
|
||
-
Did you find this white paper useful?
White Paper RSS
Download
Register
