The Resume.a Virus

What is the Resume.a virus?

The Resume.a virus is a Trojan horse, and is also called W97M.Melissa.BG or the Killer Resume virus. It has a worm element and attempts to spread itself by sending e-mail to all addresses in all available address books. The subject of the mail is "Resume - Janet Simons". The mail includes an attachment named EXPLORER.DOC. If the attachment is opened, the virus will attempt to spread itself as described above. When the attachment is closed, the virus will attempt to delete all the files on the PC's hard disk.

Where can I find more information about this virus?

Below are some links to information posted by others. While we believe this information may be useful and reasonably accurate, we have neither authenticated nor verified any of it.

F-Secure's Web site

Symantec's and Network Associates' most recent virus definitions can both detect this virus. You should use your regular update mechanisms to get the latest version of these virus definition files. See Symantec's Web site for current information on Norton AntiVirus updates and NAI's Web site for current information on McAfee VirusScan and Dr. Solomon's updates.

How can I remove this virus?

Follow the instructions found at the Web sites mentioned above, or contact the PCSC for help (353-7272, pcsc@bu.edu).

If you are affiliated with Boston University, you can download and install the latest version of Network Associates' McAfee VirusScan for free, as Boston University has a site license for this product. Please visit BU's anti-virus software Web site for more information. This site will prompt you for your BU login name and password before allowing access. Note that this program checks for, but does not remove, this virus.

I received e-mail saying that a message I sent to someone at Boston University could not be delivered because my message might contain this virus. What should I do?

It appears that your system may be infected. As described above, the virus has probably used Outlook on your system to send infected e-mail to the addresses in your MAPI address book. To avoid sending this virus on to new recipients, you should download the appropriate virus definitions for your anti-virus product and then disconnect your computer from the network until you have completely removed the virus and protected your computer against re-infection.

Return to main virus information page