Malware type: Macro

Aliases: O97M.CyberNet.Gen(Symantec), OF97/Cybernet-A(Sophos), Virus.MSOffice.Cybernet(Kaspersky), W97M/Cybernet.A@mm(Avira), W97M/Cybernet.A@mm (exact)(F-Prot), W97M/Generic@MM(McAfee)

In the wild: Yes

Destructive: Yes

Language: English

Platform: Windows 9x

Encrypted: Yes

Description: 
O97M_CYBERNET.A is a polymorphic, cross-infector macro virus that infects both Word documents and Excel worksheets and spreads via email as an attachment.
SUBJECT:
“You’ve GOT Mail !!!”
BODY:
“Please, saved the document after you read and don’t show to anyone else. The document is also VIRUS FREE… so DISREGARD the virus protection warning !!!”

On December 25 and August 17, this virus is triggered and it drops its various payloads: inserts figures in active document, inserts code in AUTOEXEC.BAT, modifies Config.sys and displays a message.

For additional information about this threat, see:
Solution
Technical Details

Description created: May. 25, 2000 3:41:12 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.