Virus.MSWord.DNZ

Class Virus
Platform MSWord
Description

Technical Details


It is an encrypted Word macro virus. It contains ten macros:


DnZ, AutoClose, FileNew, FileExit, ToolsSpelling, EditCut, EditCopy,
FileTemplates, ToolsCustomize, ToolsMacro

“DnZ” is the main macro. When executed it infects a document or the global
macros area. Other macros are Word auto-macros and functions. When executed,
they call the “DnZ” macro that will spread the virus.


The virus creates the profile section (WIN.INI file):


[Demo]
Program=Installed

On March 9th the virus displays the message box:

WM.DnZ
Written by Bill_HellGateS