Sophos

WM97/Broken

Aliases
  • WM97/Vmpck1.DD
  • W97M/VMPCK.gen
Category
Type
What to do

Summary

 
Included in our products from February 2000 (3.30)
Detected by All Sophos products

Action

More Information

This virus is produced with the VMPCK1 macro virus generator and it has been reported in the wild.

If Help|About Microsoft Word menu option is chosen, the virus displays a message box "CAPut! by -=|| N|c0t|N ||=- (c) 1998":

CAPut! by -=|| N|c0t|N ||=- (c) 1998

It also changes the Comments field in the document properties to "JU$t bEEn CAPuted!". If a user attempts to open the Visual Basic Editor (VBE), the virus displays a message box "Word Basic Err =7".

There is a 1% probability that the virus will attempt to replace all occurrences of the string "19" with the string "CAPut" and remove the Edit|Replace and Edit|Undo Word menu options.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer