WM97/Pri-AE

Name: WM97/Pri-AE
Type: Word 97 macro virus
Date: 24 July 2002


At the time of writing Sophos has received just one report of
this virus from the wild.

Description
WM97/Pri-AE will attempt to use Microsoft Outlook to send copies of the current document to all entries in the address book. The email will have the following characteristics:

Subject line: Message From <username>
Message body: This document is very Important and you've GOT to read this !!!

On 25 December WM97/Pri-AE inserts a random number of shapes into the currently open document and also edits autoexec.bat, adding code to format the hard drive on the next reboot.



More information about WM97/Pri-AE can be found at
http://www.sophos.com/virusinfo/analyses/wm97priae.html