MS Word Christian Virus?

I update a small bulletin each week. I usually take the prior bulletin and edit it (using MS Word) with the new material.

This week I noticed that all occurrences of the words: Jesus, Christ, Bible, Scripture and God were all changed into a capital “I” if the word was preceded by a space or not italicized. Since no one has access to my machine I assume that this was viral.

I have not seen this re-occur (yet) when I made a new copy of the previous bulletin and edited it.

I did a “thorough scan” of my entire machine using Avast!, nothing was found except some “decompression bombs” named VTS_01_1.VOB and VTS_02_1.VOB. These came from a video website. At the time, when they did not unpack I cancelled the Firefox tab.

Has anyone heard of such a Christian virus like I’ve described? Is this a one time occurrence or do I need to plow richer fields?

Thank you for any and all help in this matter!

grace and peace,
mark

the “decompression bombs” are no malware, they’re just big archives containing archives etc…too long to decompress and be scanned by Avast that skip them…(in your case DVD movie files); for the rest no idea.

I suggest:

  1. Clean your temporary files.
  2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  3. Use MBAM (or SUPERantispyware or even Spyware Terminator) to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete them.
  4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  5. Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
  6. Clean your Hosts file (replacing it) with HostsMan tool.
  7. Disable System Restore and then reenable it again.
  8. Immunize your system with SpywareBlaster.
  9. Check if you have insecure applications with Secunia Software Inspector.

But seems strange… never heard about that malware activity.
Any other symptom?