WM97/Broken

Category: Viruses and Spyware Protection available since:18 Nov 1999 00:00:00 (GMT)
Type: Word 97 macro virus Last Updated:18 Nov 1999 00:00:00 (GMT)
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

This virus is produced with the VMPCK1 macro virus generator and it has been reported in the wild.

If Help|About Microsoft Word menu option is chosen, the virus displays a message box "CAPut! by -=|| N|c0t|N ||=- (c) 1998":

CAPut! by -=|| N|c0t|N ||=- (c) 1998

It also changes the Comments field in the document properties to "JU$t bEEn CAPuted!". If a user attempts to open the Visual Basic Editor (VBE), the virus displays a message box "Word Basic Err =7".

There is a 1% probability that the virus will attempt to replace all occurrences of the string "19" with the string "CAPut" and remove the Edit|Replace and Edit|Undo Word menu options.

download Try Sophos products for free
Download now