Threat Description

Swlabs

Details

Aliases: Swlabs, Skam
Category: Malware
Type:
Platform: W32

Summary



WM/Swlabs is a very simple Word macro virus.



Removal



Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details




Variant:Swlabs.A

When an infected document is opened, the virus infects the global template. After that it infects all opened documents.

Beside replication, the virus will remove "File/Templates" and "Tools/Macros" menu selections.


Variant:Swlabs.B (GreenBay)

This variant changes the subject of the document to:

Green Bay Packers -- Super Bowl XXXI Champions

Additionally it infects all documents that are created and saved documents as well.


Variant:Swlabs.G (Skammy)

This variant doesn't do anything beside replicate.





Technical Details: Sami Rautiainen, F-Secure


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Scan & clean your PC

F-Secure Online Scanner will scan and clean your PC in just a few minutes for free

Learn More