Trojan.MSWord.Nikita

Class Trojan
Platform MSWord
Description

Technical Details


This is a Word macro trojan. It contains two macros: AutoOpen and Fun. The
trojanized document inside contains the text “Hello Guys! Oh, please stay
here and look!” and the image of a face. While opening that document the
virus copies its “Fun” macro to global macro area by name “AutoOpen”, then
it maximizes the face and draws it. On loading with infected NORMAL.DOT the
virus fills the current directory with random named files containing the
text:


Nikita (1997) Nightmare Joker [SLAM]