Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It attempts to disable antivirus programs, it disables some Word options, drops a text in the Word Status Bar and in the title bar of the application and password-protects some Word files.
|Detection updated on:||Sept. 25, 1998|
Lewinsky is a macro virus that reaches computers in an infected Word document with a DOC extensión. Then, it infects Word’s global template (NORMAL.DOT file) and, from there, it will infect all Word files generated with it.
Lewinsky disables some Word options, drops the text Lewinsky 1 WM97 in Word’s Status Bar and in the title bar of the application. In addition, it password-protects some Word files.
Finally, it tries to disable the antivirus program installed on the affected computer.
Lewinsky is easy to identify, as:
- The following text is displayed on the Word’s Status Bar, and on the title bar of the application:
Lewinsky 1 WM97
- Sometimes, the computer asks the user for a password in order to access a Word document. This password is Lewinsky.
- On the 20th of any month, at 12 am, Lewinsky adds a new entry in the spell checker, relating the English word ‘The’ to the Spanish sentence: Este virus ha sido creado por VH. After doing this, anytime the user writes the word ‘The’, Word will automatically replace it with the sentence Este virus ha sido creado por VH.