Sophos

CSC/CSV-A

Category
Type
What to do

Summary

Action

To disinfect infected objects delete all macros belonging to the virus.

More Information

CSC/CSV-A infects Corel SCRIPT files. Corel SCRIPT is a utility which allows Corel software to run macro-like programs written in the Corel SCRIPT language, which is like BASIC. When an infected script is invoked, the virus looks for a victim .CSC (Corel SCRIPT) file in the current directory. If an uninfected victim exists, CSV-A renames it to MALLORN.TMP, creates a new file containing a copy of the virus, and then appends the original script from MALLORN.TMP.

Trigger: 6 June.

Payload: Displays a message box with part of a poem from the J.R.R. Tolkien's "Lord of the Rings".

Message box with poem

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer