Discussion in 'malware problems & news' started by Technodrome, Jul 12, 2002.

Thread Status:
Not open for further replies.
  1. Technodrome

    Technodrome Security Expert

    Feb 13, 2002
    New York
    Word 97 macro virus

    A virus identity file (IDE) file which provides protection is available now from the Latest virus identities section, and will be incorporated into the September 2002 (3.61) release of Sophos Anti-Virus.

    At the time of writing Sophos has received just one report of this virus from the wild.

    WM97/Opey-BC changes the Microsoft Word application user information to the following:

    UserName = Alcopaul
    UserAddress = #09193612618
    UserInitials = PGA

    It also sets the File Properties information for infected files as follows:

    Author = Alcopaul
    Keywords = #09193612618
    Subject = Twice in a row of filing leave of absence.
    Comments = Year 2000 sucks!! Seems like the Y2K bug has infected me. But I assure you, 1st sem of sy 2001-02 will be the beginning of my new life.

    On 26 February the virus may password protect infected documents with the password "Paul Glenerson B. Amurao" and on 25 February it will attempt to add the line "echo Today is the last day of filing leave of absence.." to C:\autoexec.bat.

    source: http://www.sophos.com

Thread Status:
Not open for further replies.