Virus.MSWord.BlackEnd

Class Virus
Platform MSWord
Description

Technical Details


This is an encrypted virus, it contains five macros: BlackEnd, AutoNew,
AutoClose, AutoExec, AutoOpen. The system and files get infection on
AutoOpen and AutoExec. The virus also infects the files on AutoNew and
AutoClose.


On May 22nd the virus creates new template and inserts the string to there:


You are infected with the BlackEnd Virus! [D.K.]

Then it creates and executes the C:DOSYS.BAT file containing the commands:

echo off
doskey Fun=setver win.com 3.00
echo off
Fun