Classification

Category: Malware

Type: -

Aliases: Swlabs, Skam

Summary


WM/Swlabs is a very simple Word macro virus.

Removal


Automatic action

Based on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the detected program or file, or ask you for a desired action.

Knowledge Base

Find the latest advice in our Community Knowledge Base.

About the product

See the manual for your F-Secure product on the Help Center.

Contact Support

Chat with or call an expert for help.

Submit a sample

Submit a file or URL for further analysis.

Technical Details



Variant:Swlabs.A

When an infected document is opened, the virus infects the global template. After that it infects all opened documents.

Beside replication, the virus will remove "File/Templates" and "Tools/Macros" menu selections.


Variant:Swlabs.B (GreenBay)

This variant changes the subject of the document to:

Green Bay Packers -- Super Bowl XXXI Champions

Additionally it infects all documents that are created and saved documents as well.


Variant:Swlabs.G (Skammy)

This variant doesn't do anything beside replicate.

Date Created: -

Date Last Modified: -