high
Summary
Summary
Action- More Information
| Detected by | All Sophos products |
|---|---|
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for disinfecting macro viruses.
More Information
WM97/BackHand-A is a Word macro virus.
If the date is Friday the 13th the virus password protects the document with the password "Trim(Two)". The virus then displays a message box:
Then, if the year is 2000, it resets the computer's date to 1/1/1980.
On any other Friday the virus displays a message box telling you that your document has been corrupted:
Your document has been corrupted because of a bug in Word! Call Microsoft Customer Support, they can help you. When you call them, tell them this Bug-ID Code (don't forget it!): 1948321369
Please note: at the time of writing Sophos has received no reports of this virus in the wild. We are issuing this alert because of customer interest after another anti-virus company warned its users.
|
