Virus.MSWord.Baluade

Class Virus
Platform MSWord
Description

Technical Details


This is an encrypted macro virus. It contains two macros: AutoOpen, ReadMe.
It infects the global macros area on opening an infected document
(AutoOpen). The ReadMe macro is copied to the NORMAL.DOT with new name
DateiSpeichern. The virus sets two passwords: “SSichliebeDich” and
“SSICHLIEBEDICH”.