Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It infects Word documents and the global template. It prevents users from working with macros.|
|Detection updated on:||Nov. 13, 2002|
Metys.F is a macro virus that does not have any destructive effects, which affects Word documents, as well as the global template used by this application.
Metys.F activates on September 18, and infects the global template. By doing this, it will infect all the Word documents that are opened, closed or saved in the affected computer.
If the user attempts to access the Macros or Visual Basic Editor options in the Tools menu, Metys.F prevents access to them by displaying a fake error message.
Additionally, Metys.F displays text messages on screen.
A clear indication that Metys.F has reached the computer is that on accessing the Macros and Visual Basic Editor options in the Tools menu, the virus displays a series of messages on the screen. Additionally, its payload consists of displaying the following message on the screen:
HAPPY BIRTHDAY JESS! TO CELEBRATE, WE’RE GOING TO SEE HOW LUCKY YOU ARE. CLICK THE OK BUTTON BELOW TO ROLL A NUMBER. IF YOUR NUMBER MATCHES THAT OF THE DEALER, YOU WIN!
Next, the virus displays the following message:
YOU ROLL A <random number> AND THE DEALER ROLLS <random number>. I'M SORRY, BUT YOU LOST. BETTER LUCK NEXT TIME!