Virus.MSWord.Buero

Class Virus
Platform MSWord
Description

Technical Details


This is an encrypted virus. It contains two macros:


NORMAL.DOT Infected files
DateiSpeichern AutoOpen
BuroNeu BuroNeu

This virus infects the system on AutoOpen and writes itself to files on
FileSave (DateiSpeichern).


If the current date is above than 15.8.96, the virus renames the system
file IO.SYS to IIO.SYS (then it is impossible to boot DOS system), searches
for the C:*.DOC files and deletes them.