The virus was released on March 26, 1999, by David L. Smith. Smith used a hijacked
AOL account to post the virus onto an Internet newsgroup called "
alt.sex." It soon ended up on similar sex groups and pornographic sites before spreading to corporate networks. However, the virus itself was credited to
Kwyjibo, a macro virus writer for
VicodinS and
ALT-F11, by comparing
Microsoft Word documents with the same
globally unique identifier. This method was also used to trace the virus back to Smith. The "list.doc" file contains a
Visual Basic script that copies the infected file into a template file used by Word for custom settings and default
macros. If the recipient opens the attachment, the infected file will be read to computer storage. The virus then creates an Outlook object, reads the first 50 names in each Outlook Global Address Book, and sends a copy of itself to the addresses read. Melissa works on Microsoft Word 97, Microsoft Word 2000 and Microsoft Outlook 97 or 98 email clients. Microsoft Outlook is not needed to receive the virus in email, but it is unable to spread via other emails without it. A second payload occurred when the current minute matches the day when it is being launched, where the quote "Twenty-two points, plus triple-word-score, plus 50 points for using all my letters. Game's over. I'm outta here." is inserted into open Microsoft Word documents. This and the Kwyjibo alias are references to an episode of
The Simpsons, "
Bart the Genius".
Impact The virus slowed down email systems due to overloading
Microsoft Outlook and
Microsoft Exchange servers with emails. Major organizations impacted included Microsoft,
Intel Corp, and the
United States Marine Corps. The
Computer Emergency Response Team, a Pentagon-financed security service at Carnegie Mellon University, reported 250 organizations called regarding the virus, indicating at least 100,000 industrial and work computers were infected, although the number is believed to be higher. An estimated one million email accounts were hijacked by the virus. The virus was able to be contained within a few days, although it took longer to remove it from infected systems entirely. At the time, it was the fastest spreading email worm. == Arrest ==