Home Schools Links Virus List Add a School Change a Link Dead Link
Link to us Financial Aid Free E-mail Guestbook Cool Links Tell A Friend
NextCard Visa If your School has a Schools Alumni Page let us know Solve your computer needs at eBay


W97M/Mck.f
AKA
W97M/Mck, W97M/Bungo

 
Tell A Friend
about this
Page
Tell me when
this page
is updated
Link to us
Our Sponsor

This is a virus for Word 97 documents. It is not able to replicate under the SR-1 release of Word 97. It will turn off the macro warning feature of Word 97.
This virus consists of a module called "Bungo". It is created using a virus creation kit and is polymorphic.
This virus hooks the system event of opening Word97 by the subroutine "autoexec" thereby running its code. Other system events hooked are "autoopen", "autonew", "filesave", "filesaveas" and "fileclose". Attempts to use menu items of the same name within Word97 will run the macro code routine.

When opening an infected document and allowing the macro virus to run, if the minutes of the hour are between 1 and 30, a payload routine removes the text of the entire document by using the "SELECTALL/CUT" method. This means the document is still in the "clipboard" and can be recovered by using either the menu "EDIT/PASTE" or CTRL-V keyboard shortcut.

Word97 user properties are modified with the following values:
Application.Username = "Lucky Warrior"
Application.UserInitials = "LW"
Application.UserAddress = "Bgy. Tiguib, O.E.S."

Document properties are modified with the following values:
Author = "Lucky Warrior"
Keywords = "W97M/Bungo"
Comments = "More to come..."

These modifications will require manual correction.

Macro warning if opening infected document, increase in size to global template. Entire document "deletion" as listed above.

Opening infected documents will infect global template normal.dot - on pre-SR1 installations documents used within Word97 after global template is infected will also be infected.

 


 

[an error occurred while processing this directive]

Gator fills out forms and remembers passwords!


Howdy!!!
Welcome to the McCann's PooR Farm
I'm not with any school or schools,
Just a disable grandpa with 17 grand kids, 1 Great grand Kid
 
Sorry! about all of the adds, Our Cost just keeping going up.
Please click on one of them and help us out. or
Send $1.00 U.S. to:
McCann's Poor Farm
20509 Lawrence 2207
Aurora, Mo. 65605-7275
Thank You,
Junior McCann
Webmaster
and the GrandKids
 
See what the experts have to say about the McCann's Poor Farm Web Page
 
Legal Disclaimer - We Are in no way connected with any School and or Companies linked to this page. Links are provided as a courtesy only.

Where Visitors Come From:

Argentina, Australia, Austria, Belarus, Belgium, Bermuda, Brazil, Brunei Darussalam, Bulgaria, Canada, Chile, Columbia, Costa Rica, Croatia, Croatia/Hrvatska, Czech Republic, Denmark, Dominican Republic, Ecuador, Egypt, Estonia, Finland, France, Germany, Ghana, Greece, Hong Kong, Hungary, Iceland, India, Indonesia, Ireland, Israel, Italy, Japan, Jordan, Korea, Korea, Republic of, Latvia, Lebanon, Lithuania, Luxembourg, Macedonia, Malaysia, Mexico, Moldova, Netherlands, New Calendonia, New Zealand, Norway, Old style Arpanet, Papua New Guinea, Peru, Philippines, Poland, Portugal, Romania, Russian Federation, Saudi Arabia, Singapore, Slovakia, Slovenia, South Africa, South Korea, Spain, Sweden, Switzerland, Taiwan, Thailand, Turkey, Uganda, Ukraine, United Arab Emirates, United Kingdom, United States, Uruguay, USA Government, USA Military, Viet Nam
Tell A Friend
about this Page
Tell me when this page
is updated

Click Here!


Home Schools Links Virus List Add a School Change a Link Dead Link
Scholarships Financial Aid Free E-mail Guestbook Cool Links Tell A Friend
Put a Link on your Web Page

- Legal Disclaimer -
This Website Is For Your Entertainment Purposes Only!
We Are in no way connected with
any School and or Companies linked to this page.
Links are provided as a courtesy only.
 
http://www.poor-farm.com/
webmaster@poor-farm.com
McCann's PooR Farm
Aurora, Mo. 65605
© 2001