Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It creates over 5,000 folders in the root directory of the hard disk, deletes all files with DOC extension and formats the C:\ drive.
|First detected on:||April 14, 2003|
|Detection updated on:||April 14, 2003|
Lisa is a dangerous worm which creates over five thousand folders in the root directory of the hard disk. In addition, it deletes all the Word documents it finds (files with DOC extension), and disables all shortcuts on the Windows Desktop.
In addition, once these actions have been carried out, Lisa attempts to format the C:\ drive.
Lisa uses e-mail to spread in a message without attachment and the following subject: Click YES and vote against war!. Viewing this message through Outlook’s Preview pane will cause infection.
Lisa is also prepared to spread through IRC and the file sharing peer-to-peer program KaZaA.
It is very easy to identify this worm at first sight, as it creates over 5000 folders in the root directory of affected computers after infection. These folders will have a random name, which is made up of seven letters between P and Z.
In addition, Lisa creates a text file in each of these folders. These files will have the same name as the folder that contains them. These files contain the following text:
- I will never stop loving you.