Level Extreme platform
Subscription
Corporate profile
Products & Services
Support
Legal
Français
ILY Worm - Has MS notified the press?
Message
From
05/05/2000 14:43:18
 
 
To
05/05/2000 11:47:07
Mark Hall
Independent Developer & Voip Specialist
Keston, Kent, United Kingdom
General information
Forum:
Visual FoxPro
Category:
Other
Miscellaneous
Thread ID:
00366436
Message ID:
00366708
Views:
41
Mark --
There's a good written response (and apparently a number of non-posted responses) to the original message you cite which calls into question the ability of the script to make those registry modifications.

The responder did, though, identify another registry change which has thus far not been noted:

However, there is another registry-related aspect of the virus that Ihaven't seen mentioned here. When the virus mass-mails itself, it addskeys to the
HKEY_CURRENT_USER\Software\Microsoft\WAB\
hive for every message it tries to send. In an environment with a "rich" Outlook Address Book, this could result in an attempt to add tens of thousands of registry keys. AFAIK, Win9x has a physical limit of 25 megabytes for the registry - and even under WinNT, adding tens of thousands of keys to the registry is not very healthy for the system. We have had some reports about system crashing because of registry overflow and being impossible to boot again because of registry corruption -although I don't have information whether they were WinNT systems.
Previous
Reply
Map
View

Click here to load this message in the networking platform