Concept virus(?)

[Jim Dryden]

This "concept" or "prank" virus propagates itself through Word
6.x and 7.0 documents that automatically run a macro when the document is 
opened. The macro copies itself into the normal template and then
replicates itself into new files, which it saves as templates. This macro
will sometimes also insert the word "wazzu" into the document when it is
opened. Good virus protection such as a current version of F-Prot will
catch and disinfect most macro viruses; however if you don't have virus
protection software loaded or available, there are workarounds. You can
delete the offending macro (usually "autopen", "aaazao", or
"FileSaveAs") by going to the list of macros (click tools menu and click
"macros.")
Then, you must copy the entire contents of the infected document ("select
all" on the "edit" menu), copy, and paste the contents into a new
document, and save that new document.

An annoying, if not devastating, little virus. Hope this works.

---------------------
Jim Dryden
University of Kansas Libraries


Wed, 26 Feb 1997, Lisa wrote:

> We have picked up a virus which appears to only effect WORD by preventing
> docs being saved in any other directory bar the templete directory, which
> is write protected. Has this effected anyone else or does anyone have any
> advice?  We also have the odd reappearance of a moving text on the menu
> bar (Win 95) which appears for apx. 5 seconds every third or so day, and
> in part ends with "Bandang, Indonesia".  Microsoft can't (or won't) help.
> Any suggestions?
> 
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Lisa McDonald						Ph: 0414 246 084
> Library Manager						P.O. Box 166	
> Australian Biographical Library				Port Fairy 3284
> 
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> 
>