Virus.MSWord.Armadillon

Class Virus
Platform MSWord
Description

Technical Details


This is an encrypted macro-virus. It contains four macros: Autoexec,
FileSaveAs, AutoOpen, and ToolsMacro. Upon AutoExec and AutoOpen calls, the virus
infects the global macros area. Upon FileSaveAs, the virus writes itself to
documents. On Tuesday, the virus displays the MessageBox:


Liven up Monday with an Armadillon!

Upon accessing the Tools/Macro menu, the virus inserts 10,000 strings into current document:

Armadillon Macro?