You May Receive a Macro Warning Message When You Open an Office Program and Files May Be Deleted That You Did Not Delete (282967)
The information in this article applies to:
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows 98 Second Edition
- Microsoft Windows Millennium Edition
This article was previously published under Q282967 SYMPTOMS
When you open a Microsoft Office document, you may receive the following macro warning message:
The file you are opening contains macros. Some macros may contain viruses that could harm your computer.
This warning message does not necessarily mean that you computer is infected with a virus.
Also, you may discover that files on your computer have been deleted.
CAUSE
This behavior can occur if your computer is infected with the THUS.A macro virus.
RESOLUTION
If you suspect that your computer is infected with a virus, you should obtain current antivirus software from a vendor who is commercially involved in virus detection and removal to resolve this issue. For a list of suppliers (vendors) of antivirus software, view the following article in the Microsoft Knowledge Base:
49500 List of Antivirus Software Vendors
Note that Microsoft does not offer software for computer-virus detection or removal.
MORE INFORMATION
The THUS.A macro virus attempts to delete all files on the root of drive C, as well as all folders and sub-folders, if a you open an infected document on December 13.
The THUS.A virus is spread when infected documents are transferred between computers.
When the virus first infects a document on your computer, the virus modifies the Normal.dot Office file with the line "Thus_001", installs itself as a file named Thisdocument, and turns off the Macro Warning feature in Microsoft Word after the initial infection.
REFERENCES
| Modification Type: | Minor | Last Reviewed: | 7/8/2005 |
|---|
| Keywords: | kbenv kbnofix kbprb kbvirus KB282967 |
|---|
|