New Word macro virus spotted
Viruses got you down? Spyware making your system sluggish? Post here for support on all your security needs.

Moderators: Forum Experts, Management

New Word macro virus spotted

Postby dlt on Thu Jan 02, 2003 12:14 am

Anti-virus software maker Symantec has put out an advisory about a new macro virus for Microsoft Word, which, in a worst-case scenario, can overwrite the master boot record of any and all drives on a computer.

The virus, named W97M.Killboot, infects a currently active document and the Normal.dot template when an infected document is closed. Once this template is infected, clean documents will be infected when they are closed.

It creates the file C:\Setver.exe, which the Symantec antivirus products detect as Trojan.Killboot. If Trojan.Killboot is run, it writes the viral code into the Master Boot Record; this can overwrite the MBR on all physical hard drives with zeroes.


Source

Image
User avatar
dlt
PROfessional Member
 
Posts: 4077
Joined: Mon Mar 11, 2002 6:56 am
Location: New England, USA

Return to Security & Virus

Who is online

Users browsing this forum: No registered users and 0 guests