WM97/Adenu-B

Category: Viruses and Spyware
Type: Word 97 macro virus
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

WM97/Adenu-B prepends a message to the contents of the active document if the date is 26 June.

WM97/Adenu-B lowers the Microsoft Office Security settings by setting the following registry entry:

HKCU\Software\Microsoft\Office\9.0\Word\Security\
Level
"01"

WM97/Adenu-B also disables the following Toolbar options:

Tools|Macro, Tools|Customize, Tools|Templates and Add-Ins

WM97/Adenu-B drops VBS/Adenu-B to the Windows System folder as "che.ocx.vbs" and sets the following registry entry so that it is run on startup:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
che32
"<System>\che.ocx.vbs"

download Try Sophos products for free
Download now