Virus Causes Scrambled Toolbar Lists in WordArt

Q138445

-------------------------------------------------------------------------
The information in this article applies to:

 - Microsoft Publisher for Windows 95, version 3.0
-------------------------------------------------------------------------

SYMPTOMS
========

If you insert or edit a WordArt object in Publisher for Windows 95, the
text in the Shapes, Fonts, and Font Size drop-down lists on the toolbar may
appear as garbage characters. These symptoms may or may not occur if you
insert or edit a WordArt object in another OLE application, such as
Microsoft Word.

CAUSE
=====

This symptom may be caused by the Monkey virus or one of its variations.
Additionally this can be caused by a corrupted Monotype Sorts font in the
font folder; Q138795, or zero size fonts in the font folder; Q136915.

RESOLUTION
==========

To see if you have the Monkey virus, check your system with an anti-virus
utility. If you do not have an anti-virus utility, do one of the following:

Method 1: Check your System Properties:

          a. With the right mouse button, click the My Computer icon.
          b. Click Properties.
          c. Click the Performance tab. If any or all of your drives are
             running in 16-bit mode, you may have a virus.

Method 2: Start Windows with a clean floppy disk:

          a. Write protect your Windows Startup Disk or an MS-DOS bootable
             floppy disk and insert it in drive A.
          b. Restart your computer.
          c. If your system can't find drive C, you probably have the
             Monkey virus.

STATUS
======

Microsoft is researching this problem and will post new information here in
the Microsoft Knowledge Base as it becomes available.

MORE INFORMATION
================

The Monkey Virus is spread when you try to start (boot) your computer using
an infected floppy disk. If you have an infected disk in drive A when you
turn on or reboot your computer, you will receive an error similar to the
following:

   Disk i/o error

This is not the standard message you get when you try to boot from an
unbootable disk.

Once your hard drive is infected, any other non-write-protected disk you
access will become infected.

The Monkey virus replaces the Master Boot Record (MBR) of your hard drive
with its own code. The original MBR is encrypted and hidden elsewhere on
your drive. All attempts to read the MBR are routed through the virus, so
Windows can't use 32-bit disk access. Also, if you start your computer
using a bootable floppy disk, it will appear as though your hard drive has
no MBR.

The best way to remove this virus is to use an anti-virus program, such as
Norton Anti-Virus or McAfee Scan. Be sure to carefully read the
documentation for your anti-virus software before attempting to clean this
virus.

Additional query words: 3.00 pub3 w_mspub pub95 wa oleapps crossprod
Dialog Dropdown Drop down