Editing Melissa (computer virus)

{{Short description|Mass-mailing macro virus}}
{{Context|date=July 2018}}
{{Infobox computer virus
| Image          =
| Common name    = Melissa
| Technical name = 
* W97M.Melissa.A ([[NortonLifeLock|Symantec]])
* Virus:W32/Melissa ([[F-Secure]])<ref>{{cite web |title=Virus:W32/Melissa Description {{!}} F-Secure Labs |url=https://www.f-secure.com/v-descs/melissa.shtml |website=www.f-secure.com |language=en}}</ref>
| Aliases        = 
| Family         = 
| Classification = 
| Type           = [[Macro virus]]
| Subtype        = 
| IsolationDate  = 
| Origin         = 
| Author         = David L. Smith
| Ports used     =
| OSes           = [[Windows 95]], [[Windows 98]], [[Windows Me]], [[Windows NT]], [[Windows 2000]], [[Windows XP]]<ref>{{cite web|title=W97M.Melissa.A|url=http://www.symantec.com/security_response/writeup.jsp?docid=2000-122113-1425-99|archive-url=https://web.archive.org/web/20061110161357/http://www.symantec.com/security_response/writeup.jsp?docid=2000-122113-1425-99|url-status=dead|archive-date=November 10, 2006|publisher=Symantec|access-date=9 February 2013}}</ref> 
| Filesize       =
| Language       =}}
The '''Melissa virus''' was a fast-spreading macro virus. It first appeared around March 26, 1999. This virus mainly attacked computers using [[Microsoft Word]] and [[Microsoft Outlook|Outlook]]. Melissa worked by sending itself to many people through email. This caused huge increases in network traffic, slowing down systems. The virus used infected Word documents as a way to spread. When someone opened an infected document, the virus would activate. It would then send itself to the first 50 people in the victim's Outlook address book. This rapid self-propagation made Melissa one of the most costly outbreaks at the time. Many companies had to shut down their email systems to stop its spread. Experts estimate that Melissa caused hundreds of millions of dollars in damages.

== Description ==
The virus was released on March 26, 1999, by David L. Smith.<ref>{{cite web|title = Justice mysteriously delayed for 'Melissa' author |last=Poulson|website=[[The Register]] |url=https://www.theregister.co.uk/2001/08/01/justice_mysteriously_delayed_for_melissa/}}</ref>
Smith used a hijacked [[AOL]] account to post the virus onto an Internet newsgroup called "alt.sex."<ref>{{Cite web |title=Melissa Virus |url=https://www.fbi.gov/history/famous-cases/melissa-virus |access-date=2022-04-01 |website=Federal Bureau of Investigation |language=en-us}}</ref> It soon ended up on similar sex groups and pornographic sites before spreading to corporate networks. However, the virus itself was credited to ''Kwyjibo'', a [[macro virus]] writer for ''VicodinS'' and ''ALT-F11'', by comparing [[Microsoft Word]] documents with the same [[globally unique identifier]]. This method was also used to trace the virus back to Smith.

The "list.doc" file contains a [[VBScript|Visual Basic script]] that copies the infected file into a template file used by Word for custom settings and default [[Macros in Microsoft Word|macros]]. If the recipient opens the attachment, the infected file will be read to computer storage. The virus then creates an Outlook object, reads the first 50 names in each Outlook Global Address Book, and sends a copy of itself to the addresses read.<ref>{{Cite web |title=What is the Melissa Virus? |url=https://www.techtarget.com/searchsecurity/definition/Melissa-virus |access-date=2022-04-06 |website=SearchSecurity |language=en}}</ref> Melissa works on Microsoft Word 97, Microsoft Word 2000 and Microsoft Outlook 97 or 98 email clients. Microsoft Outlook is not needed to receive the virus in email, but it is unable to spread via other emails without it.

A second payload occurred when the current minute matches the day when it is being launched, where the quote "Twenty-two points, plus triple-word-score, plus 50 points for using all my letters. Game's over. I'm outta here." is inserted into open Microsoft Word documents. This and the Kwyjibo alias are references to an episode of ''[[The Simpsons]]'', "[[Bart the Genius]]".<ref name="bbc-guilty">{{cite web |title = Melissa virus creator pleads guilty |publisher = BBC |date = 1999-12-09 |url = http://news.bbc.co.uk/2/hi/science/nature/557605.stm}}</ref>

=== Impact ===
The virus slowed down email systems due to overloading [[Microsoft Outlook]] and [[Microsoft Exchange Server|Microsoft Exchange]] servers with emails. Major organizations impacted included Microsoft, [[Intel|Intel Corp]],<ref>{{Cite web |title=Melissa virus hits Outlook e-mail - Mar. 29, 1999 |url=https://money.cnn.com/1999/03/29/technology/virus/ |access-date=2022-04-01 |website=money.cnn.com}}</ref> and the [[United States Marine Corps]].<ref>{{Cite web |last=McNamara |first=Paul |date=2014-03-25 |title=Melissa virus turning 15 … (age of the stripper still unknown) |url=https://www.networkworld.com/article/2226599/melissa-virus-turning-15----age-of-the-stripper-still-unknown-.html |access-date=2022-04-01 |website=Network World |language=en}}</ref> The Computer Emergency Response Team, a Pentagon-financed security service at Carnegie Mellon University, reported 250 organizations called regarding the virus, indicating at least 100,000 workplace computers were infected, although the number is believed to be higher.<ref>{{Cite news |last=Markoff |first=John |date=1999-03-30 |title=Digital Fingerprints Leave Clues to Creator of Internet Virus |language=en-US |work=The New York Times |url=https://www.nytimes.com/1999/03/30/us/digital-fingerprints-leave-clues-to-creator-of-internet-virus.html |access-date=2022-04-01 |issn=0362-4331}}</ref> An estimated one million email accounts were hijacked by the virus.<ref>{{Cite web |title=Melissa Virus|url=https://www.fbi.gov/history/famous-cases/melissa-virus|access-date=2022-04-01|website=Federal Bureau of Investigation|language=en-us}}</ref> The virus was able to be contained within a few days, although it took longer to remove it from infected systems entirely. At the time, it was the fastest spreading email worm.{{Citation needed|date=December 2023}}

== Arrest ==
On April 1, 1999, Smith was arrested in [[New Jersey]] due to a tip from AOL and a collaborative effort involving the [[FBI]], the [[New Jersey State Police]], Monmouth Internet, a Swedish [[computer scientist]], and others. Smith was accused of causing US$80 million worth of damages by disrupting personal computers and computer networks in business and government.<ref name="collaboration">{{citation |title = Tracking Melissa's alter egos |publisher = ZDNet |date = 1999-04-02 |url = https://www.zdnet.com/article/tracking-melissas-alter-egos/}}</ref><ref>{{Cite web |title=The Melissa Virus: An $80 Million Cyber Crime in 1999 Foreshadowed Modern Threats |url=https://www.fbi.gov/news/stories/melissa-virus-20th-anniversary-032519 |access-date=2022-10-24 |website=Federal Bureau of Investigation |language=en-us}}</ref>

On December 10, 1999, Smith pleaded guilty to a second-degree charge of computer theft<ref>{{Cite web |last=Lemos |first=Robert |title=Smith pleads guilty to Melissa virus |url=https://www.zdnet.com/article/smith-pleads-guilty-to-melissa-virus/ |access-date=2022-04-01 |website=ZDNet |language=en}}</ref> and a federal charge of damaging a computer program due to releasing the virus.<ref name="bbc-guilty"></ref>

On May 1, 2002, he was sentenced to 20 months in federal prison and fined USD $5,000.<ref name="smith-sentence">{{cite press release |title = Creator of Melissa Computer Virus Sentenced to 20 Months in Federal Prison |publisher = U.S. Department of Justice |date = 2002-05-01 |url = https://www.justice.gov/archive/criminal/cybercrime/press-releases/2002/melissaSent.htm |access-date = 2006-08-30}}</ref><ref>{{Cite web |url=https://www.justice.gov/archive/criminal/cybercrime/press-releases/2002/melissaSent.htm |title=Press Release: Creator of Melissa Computer Virus Sentenced to 20 Months in Federal Prison (May 1, 2002) |website=www.justice.gov |access-date=2020-01-05}}</ref>

==See also==
* [[Code Red (computer worm)]]
* [[Morris worm]]
* [[SQL Slammer]]
* [[Tuxissa]]
* [[Timeline of computer viruses and worms]]
* [[Comparison of computer viruses]]
* [[Anna Kournikova (computer virus)]]

==References==
{{Reflist|30em}}

==External links==
* [http://www.f-secure.com/v-descs/melissa.shtml F-Secure Melissa Page]
* [https://www.cnet.com/news/melissa-virus-turns-10/ Melissa virus turns 10]
*[[SciShow]]: [https://www.youtube.com/watch?v=DF8Ka8Jh0BQ&ab_channel=SciShow 5 Worst Computer Viruses]

{{Hacking in the 1990s}}

[[Category:Hacking in the 1990s]]
[[Category:Macro viruses]]
[[Category:1999 in computing]]
[[Category:March 1999]]
[[Category:The Simpsons]]