Technical Details
The virus contains fourteen macros in one module “SiliconC”: AutoOpen,
AutoClose, FileSave, FileSaveAs, SendMail, Innocence, FilePrint, ToolsMacro
(stealth), FilesTemplates, EditFind, ToolsWordCount, ViewVBCode, InfectDOC,
and InfectGlob.
It infects the system macros area and documents upon calling one of these
macros.
Upon closing files, saving or saving with new name, the virus sets a randomly selected password for documents. The virus also changes the mouse-button functions.
The virus sets document variables:
UserName = “Silicon Child”
UserInitials = “SC”
UserAddress = “532 Silicon Valley Kln. Angle Of Sin Loves You Stephanie”
In May, it displays the MessageBox:
Message from Global Network TCP/IP Instuction
I LOVE YOU STEPHANIEY
On August 28, it erases the files:
c:command.com
C:autoexec.bat
C:windowssystem.dat
C:windowssystem.da0
C:windowsuser.dat
C:windowsuser.da0
It then deletes all files in the “C:Progra~1” directory and displays the
MessageBox:
Silicon Child — By Angle Of Sin – POTion Forever
A WAR WIll BEING. BROUGHT ON BY NOT A RULER BUT A CHILD PROTECTED BY THE
ANGLE OF SIN. THIS WILL BE A DIGITAL WAR. ENERMIES USING THE LATEST
DEVICES OF TECHNOLOGY, IT WILL BE A WAR ABOUT ME AND YOU, GOVERNMENT AND
PRISONERS AND COPS AND CRIMINALS, THE WILL BE CALLED THE SILiCoN ChIlD.
The New World Will Be Run By The SiLiCon ChiLd and By The InFoMaTiOn
LibErAtIoN FrOnT.
Upon entering the Tools/Macro menu, it displays the MessageBox:
Fatal Systematic Error
An Invalid Command Was executed, the last processed command will be
terminated
It contains the comments:
This is a dedication to Stephanie Collinz…the most beautiful girl in
the world.. May be I’m tripping right now but yea!. Thanks to ILF for
distributing Info….LONG LIVE ILF
|