Antivirus and Security Software from Sophos

Sophos blogs

WM97/Chantal-B

Category
Type
What to do
Prevalence low high

Summary

 
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

WM97/Chantal-B is a Word macro virus which drops a batch file virus and a Visual Basic script trojan horse.

On the 31st of any month the virus displays the Microsoft Office assistant with the message:

MK Words V.2 Y2K is Coming Soon... OK

If the year is 2000 the virus attempts to delete all files in the current directory and in the root directory of the C: drive, displaying the following message:

Welcome To Y2K
The dropped batch file virus will infect other batch files. The virus makes several system changes, including setting the registered owner of Windows to "Mae Koo V-Groups" and the version to "MKV-99". The following text is included in the virus:
MK-Words 2
From the MKVG - The Lion City
MKVG had present MK Words Version 2
(C) May 1999
Sophos Anti-Virus detects the Word macro component of the virus as WM97/Chantal-B, the batch file component as Mid/Chantal-B, and the Visual Basic Script as VBS/Chantal-B.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer