WM97/Opey-BC

Discussion in 'malware problems & news' started by Technodrome, Jul 12, 2002.

Thread Status:
Not open for further replies.
  1. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    Type
    Word 97 macro virus

    Detection
    A virus identity file (IDE) file which provides protection is available now from the Latest virus identities section, and will be incorporated into the September 2002 (3.61) release of Sophos Anti-Virus.

    At the time of writing Sophos has received just one report of this virus from the wild.


    Description
    WM97/Opey-BC changes the Microsoft Word application user information to the following:

    UserName = Alcopaul
    UserAddress = #09193612618
    UserInitials = PGA

    It also sets the File Properties information for infected files as follows:

    Author = Alcopaul
    Keywords = #09193612618
    Subject = Twice in a row of filing leave of absence.
    Comments = Year 2000 sucks!! Seems like the Y2K bug has infected me. But I assure you, 1st sem of sy 2001-02 will be the beginning of my new life.

    On 26 February the virus may password protect infected documents with the password "Paul Glenerson B. Amurao" and on 25 February it will attempt to add the line "echo Today is the last day of filing leave of absence.." to C:\autoexec.bat.

    source: http://www.sophos.com


    Technodrome
     
    Technodrome, Jul 12, 2002
    #1
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...