OFF97: Another Program Starts When You Try to Start Word (329385)


The information in this article applies to:

  • Microsoft Office 97 for Windows
  • Microsoft Word 97 for Windows
This article was previously published under Q329385
This article discusses the W32.Klez worm that may affect the operation of your computer. The information in this article is provided as-is without warranty of any kind. Microsoft does not provide software to stop virus infections or to cure infected computers. You may want to contact an antivirus software manufacturer for more information about how to remove a virus from your computer and about how to prevent future infections. If your computer has been infected, it may be open to additional forms of attack. Microsoft recommends that you rebuild infected Internet-facing servers (servers that function without a firewall or other protection) by following the guidelines that are published on the CERT Web site. Microsoft also recommends that you rebuild any other computers that are at risk because of their proximity to infected computers before you place them back in service.

SYMPTOMS

You may experience one or more of the following symptoms:
  • When you try to open a Word document or start Word by clicking the shortcut on the Start menu, you may receive the following error message:
    Windows cannot find "winword.exe".
    After you receive this error message, Word does not start. Instead, one of the following programs starts:

    Microsoft Office Binder
    Microsoft Access
    Microsoft Excel
    Microsoft PowerPoint
    Microsoft Outlook
    Microsoft Graph

  • The Word shortcut (or icon) may not look like a Word icon. For example, the icon may look similar to an Office Binder icon.
  • When you try to start Word by using the run command on the Start menu, you may receive the following error message:
    Windows cannot find "winword.exe". Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search.
  • When you search your hard disk for the Winword.exe file, you may find the file in the Drive:\Windows\Prefetch folder, where Drive is the drive on which Windows is installed.
  • When you try to install Office 97, you may receive the following error message:
    Bdrintl.dll was unable to register itself in the system registry.

CAUSE

This issue may occur if your computer is infected with a variant of the W32.Klez worm.

RESOLUTION

Microsoft does not provide software that can detect or remove computer viruses. If you suspect or confirm that your computer is infected with a virus, obtain current antivirus software. For a list of antivirus software manufacturers, click the following article number to see the article in the Microsoft Knowledge Base:

49500 List of Antivirus Software Vendors

MORE INFORMATION

To determine if the W32.Klez worm is running on your computer:
  1. Quit all running programs.
  2. Click Start, click Run, type msconfig in the Open box, and then click OK.
  3. Click the Services tab, and then click to select the Hide All Microsoft Services check box.
  4. View the list of running services for the following service, where xxx is two to three random characters appended to the word WINK:

    WINKxxx

    For example, look for WINKAP, WINKZFU, or WINKNWK. If this service is listed, your computer may be infected with a variant of the W32.Klez worm.
For additional information about the W32.Klez worm, visit the following third-party Web sites:

http://www.grisoft.com/html/news/klezh.htm

http://securityresponse.symantec.com/avcenter/venc/data/w32.klez.gen@mm.html

http://vil.mcafee.com/dispVirus.asp?virus_k=99455

Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

For additional information about the W32.Klez worm and Microsoft Word, click the article number below to view the article in the Microsoft Knowledge Base:

323037 WD: Text Is Displayed as Unreadable Symbols When You Open a Word Document

For more information about viruses, visit the following Web sites:

CERT - Computer Emergency Response Team

NIPC - National Infrastructure Protection Center, and the FBI

CIAC - Computer Incident Advisory Capability

Modification Type:MinorLast Reviewed:1/6/2006
Keywords:kbenv kbprb kbui KB329385
©2004 Microsoft Corporation. All rights reserved.