Class Virus
Platform MSWord

Technical Details

It is an encrypted Word macro virus. It contains ten macros:

DnZ, AutoClose, FileNew, FileExit, ToolsSpelling, EditCut, EditCopy,
FileTemplates, ToolsCustomize, ToolsMacro

“DnZ” is the main macro. When executed it infects a document or the global
macros area. Other macros are Word auto-macros and functions. When executed,
they call the “DnZ” macro that will spread the virus.

The virus creates the profile section (WIN.INI file):


On March 9th the virus displays the message box:

Written by Bill_HellGateS

Find out the statistics of the threats spreading in your region