Antivirus and Security Software from Sophos

Sophos blogs

WM97/Broken

Aliases
  • WM97/Vmpck1.DD
  • W97M/VMPCK.gen
Category
Type
What to do
Prevalence low high

Summary

 
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

This virus is produced with the VMPCK1 macro virus generator and it has been reported in the wild.

If Help|About Microsoft Word menu option is chosen, the virus displays a message box "CAPut! by -=|| N|c0t|N ||=- (c) 1998":

CAPut! by -=|| N|c0t|N ||=- (c) 1998

It also changes the Comments field in the document properties to "JU$t bEEn CAPuted!". If a user attempts to open the Visual Basic Editor (VBE), the virus displays a message box "Word Basic Err =7".

There is a 1% probability that the virus will attempt to replace all occurrences of the string "19" with the string "CAPut" and remove the Edit|Replace and Edit|Undo Word menu options.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer