Virus.MSWord.Epidemic

Class Virus
Platform MSWord
Description

Technical Details


This is a very dangerous encrypted macro-virus. It contains two macros:
AutoExec and AutoOpen, and infects documents and the global macros area in both
cases.


On October 10th, it erases the files: C:IO.SYS, C:MSDOS.SYS,
and C:COMMAND.COM. Then it displays a MessageBox with the following text:


EPIDEMIC Macro Virus V1.1

On June 17th, it drops a copy of the multipartite “Natas” virus.


On April 27th, it appends the following commands to the C:AUTOEXEC.BAT file:


PATH=%PATH%;C:DOS;C:WINDOWSCOMMAND
echo y | format c:/u/V:EPIDEMIC >nul