Virus.MSWord.Dracula

Class Virus
Platform MSWord
Description

Technical Details


This is an encrypted Word macro virus. It contains six macros: AutoExec,
AutoOpen, FileSave, FilePrint, FileSaveAs, ToolsMacro (stealth). The virus
infects the global macros area (NORMAL.DOT) on opening an infected document
(AutoOpen) and writes itself to documents that are saved (FileSave,
FileSaveAs).


Starting from Jule 4th 1997 while printing a document the virus inserts the
string “c Dr. Acula” and sets the password “da”. On entering the ToolsMacro
menu the virus removes all macros from the current document.