Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

WM/CopyCap.A

WM/CopyCap.A is a macro virus operating in the Microsoft Word environment. It consists of macros with names CS77, AutoExec, AutoOpen, FileOpen, FileSave, AutoClose, FileClose, FileSaveAs, ToolsMacro, FileTemplates and ToolsCustomize.
The macro CS77 contains its own code which spreads the WM/CopyCap.A. In the macro code are the following lines with notes:

'C.P.A.V: Comp5t4r Po1nt 4nti Viru5.. Bye..Bye..
'"4L13n'5" (eN4nk1Y@http://WWW.Comp5t4r.com/ed.id.).
'Chiepoe that, 14iN, Dic 2000.
'P.D. Aug igal ngisup nad StreSS!!! Alig ul .. taub Suriv Orcam ..!

WM/CopyCap.A attacks documents when they are being opened, closed, saved and saved under a new name.
The macros ToolsMacro, FileTemplates and ToolsCustomize do not contain any code and they are intended only to protect the virus from being detected.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.