Class
VirTool
Platform
MSWord

Parent class: Malware

Malicious tools are malicious programs designed to automatically create viruses, worms, or Trojans, conduct DoS attacks on remote servers, hack other computers, etc. Unlike viruses, worms, and Trojans, malware in this subclass does not present a direct threat to the computer it runs on, and the program’s malicious payload is only delivered on the direct order of the user.

Read more

Class: VirTool

VirTool programs can be used to modify other malicious programs so that they cannot be detected by antivirus software.

Read more

Platform: MSWord

Microsoft Word (MS Word) is a popular word processor and part of Microsoft Office. Microsoft Word files have a .doc or .docx extension.

Description

Technical Details

This program is an MS Word document (a DOC file). It is 2,088 bytes in size. It is written in MSWord's macro language.

Payload

This program is a shell for other macro viruses. It uses MS Word Variables to copy its body and malicious code to the Normal.dot template and to the current document.

Removal instructions

  1. In the Services menu, choose Macros — Security.
  2. Set the Security level to High.
  3. Delete the macro.
  4. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.