Article ID: 282967
Article Last Modified on 3/22/2007
APPLIES TO
- Microsoft Windows 95
- Microsoft Windows 98 Standard Edition
- Microsoft Windows 98 Second Edition
- Microsoft Windows Millennium Edition
This article was previously published under Q282967
SYMPTOMS
When you open a Microsoft Office document, you may receive the following macro warning message:
This warning message does not necessarily mean that you computer is infected with a virus.
Also, you may discover that files on your computer have been deleted.
CAUSE
This behavior can occur if your computer is infected with the THUS.A macro virus.
RESOLUTION
If you suspect that your computer is infected with a virus, you should obtain current antivirus software from a vendor who is commercially involved in virus detection and removal to resolve this issue. For a list of suppliers (vendors) of antivirus software, view the following article in the Microsoft Knowledge Base:
49500 List of Antivirus Software Vendors
Note that Microsoft does not offer software for computer-virus detection or removal.
MORE INFORMATION
The THUS.A macro virus attempts to delete all files on the root of drive C, as well as all folders and sub-folders, if a you open an infected document on December 13.
The THUS.A virus is spread when infected documents are transferred between computers.
When the virus first infects a document on your computer, the virus modifies the Normal.dot Office file with the line "Thus_001", installs itself as a file named Thisdocument, and turns off the Macro Warning feature in Microsoft Word after the initial infection.
REFERENCES
Additional query words: av anti virus
Keywords: kbenv kbnofix kbprb kbvirus KB282967
