Virus.MSWord.BlackDeath

Class Virus
Platform MSWord
Description

Technical Details


This is an encrypted Word macro virus. It contains three macros: AutoExec,
AutoOpen, BlackDeath. The virus replicates itself when documents are
opened (AutoOpen).


On Friday 13th it prints the text to the status line:


Please wait… Scanning disk!

and deletes the files:

C:*.COM
C:WINDOWS*.INI

It then prints:

Please wait… Reading directories!

and deletes the files:

C:AOL30ORGANIZE*.*
C:AOL30IDB*.*
C:WINDOWS*.COM
C:WINDOWS*.HLP
C:WINDOWS*.CPL
C:WINDOWS*.BMP
C:*.EXE”.

It then displays the MessageBoxes:

Your computer is now lost to the ages…
WM.BlackDeath
Written on 6/6/1997