'Thursday' virus strikes in eight countries

'Thursday' virus strikes in eight countries

A new Word 97 macro virus hit banks and financial institutions in eight countries on Thursday, according to antivirus vendor Network Associates Inc (NAI).

The California-based company on Friday said its Anti-Virus Emergency Response Team received reports of the W97M/Thus.A, also known as "Thursday", Word 97 macro virus, an NAI spokesman said. He said the virus has struck 5000 desktops across eight countries, including the US, Germany, Ireland, France and Switzerland.

The Thursday virus was discovered late last month, and the jump in infections is related to banks and financial institutions filing end of the month reports, the NAI spokesman said. The company updated a warning about the virus on its Web site, calling it high risk.

W97/Thus.A is a Word 97 macro virus, infecting the template within Microsoft Word 97. The virus contains a module -- "ThisDocument" -- which turns the macro warning off and infects any Word documents opened or created on that machine from then on, Network Associates said. It is also programmed to delete all files on the C drive on December 13, the company said.

It spreads through sharing a document, rather than automatically e-mailing itself through a network, the company said.

Users infected with the Thursday virus can't see any obvious indications of an infected document, Network Associates said. However, will increase from its normal 27K size, the company added.

The company advised network administrators and users to upgrade their antivirus software.

But one industry watcher said the Thursday virus isn't that dangerous.

"It's not a fast spreader like Melissa, and it hasn't got a devastating payload like Chernobyl. And it's pretty easy to detect," said Roger Thompson, technical director of malicious code research at the International Computer Security Association in Virginia. "There's probably 1000 new macro viruses a month, and this is just one that got lucky." Thompson added that Network Associates has typically been "fairly responsible" about sending out virus warnings.

Thompson speculated that the virus was probably contained in a single document that was mailed to several people in the financial industry, accounting for its rapid spread within that industry.

Follow Us

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.


ARN Innovation Awards 2022

Innovation Awards is the market-leading awards program for celebrating ecosystem innovation and excellence across the technology sector in Australia.

EDGE 2022

EDGE is the leading technology conference for business leaders in Australia and New Zealand, built on the foundations of collaboration, education and advancement.

Brand Post

Channel Roadmap

The Channel Roadmap is a bespoke content hub housing strategic priorities from technology vendors for 2022 and beyond, partners can find the guidance on the key technologies and markets to pursue, to help build a blueprint for future success.

Show Comments