Virus.MSWord.Cleanup

Class Virus
Platform MSWord
Description

Technical Details


This is a Portuguese encrypted macro virus. It contains only one macro
AutoOpen and replicates itself on opening documents.


In January in 2000 the virus erases all files on the C: drive, but cancels
erasing if any of files presents on disk:


C:DOSMASTERPC.TXT
C:WINDOWSMASTERPC.TXT
C:WINDOWSSYSTEMMASTERPC.TXT

While deleting the virus displays the messages:

SEARCHING TEMPORARY FILE TYPE …
PROBABLE TEMPORARY FILE FOUND
Delete this file
DELETING FILE…
Files Deleted. Keep your Hard Drive cleaned !