Technorati
Digg
Delicious
Reddit
StumbleUpon
Facebook
Yahoo
Twitter
Faves
Newsvine
- Updated:
- February 13, 2007 11:34:07 AM
- Also Known As:
- WM.WorldCup
- Type:
- Macro
The virus consists of one VBA5 module "WorldCup98" and one UserForm "Pronostic". The "WorldCup98" module has several sub-functions:
- AutoOpen infects global template and display a message "VIVE LA COUPE DU MONDE 98!!!"
- AutoExec activates payload on the 12th day of the month or the 12th hour of the day.
- FileSaveAs infects documents and display a message "J'espare que tu aime le football..."
- FileTemplates displays a message "Hip hip Hourra!!!!"
- Pronostique 1st payload
- ToolsMacro displays a message "ZeMacroKiller98 est heureux de dodier ce virus ..."
- ViewVBCode Pops up MS Word Assistant dialog Allez la France!!!!!
WC98Payload 2nd payload
Antivirus Protection Dates
- Initial Rapid Release version July 9, 1998
- Latest Rapid Release version July 9, 1998
- Initial Daily Certified version July 9, 1998
- Latest Daily Certified version July 9, 1998
- Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Easy
Damage
- Damage Level: Low
Distribution
- Distribution Level: Low
Writeup By: Raul Elnitiarta
