A new online attack is exploiting a security vulnerability in Microsoft Word 2000 and leaves Windows computers vulnerable to an online takeover.

Computer security experts are advising users of Word 2000 not to open documents from unknown sources.

The virus uses a two-step attack, starting when the user opens a Microsoft Word document, usually received through e-mail.

The program's vulnerability is triggered when the malformed Word document is opened, causing a error in the computer's memory.

The error allows the virus to run a program, in this case one that opens a "back door," allowing an online attacker to take control of the computer.

Secunia, a Danish website that monitors security alerts, called the flaw in Microsoft Word "extremely critical," its highest security warning.

Microsoft has not offered a patch to fix this security vulnerability, but says that the virus has been added to its Live OneCare online safety scan.

The viruses affect computers running Microsoft Word 2000 on any version of Windows. The virus does not automatically spread itself, but does leave the computer open to control by online attackers.