Virus.MSWord.Epsilon

Class Virus
Platform MSWord
Description

Technical Details


It contains six macros in one module “Epsilon”: AutoExec, AutoOpen,
FileSaveAs, FileTemplates, ToolsMacro, ViewVBCode.


The virus infects the global macros area on opening an infected document,
after infection the virus displays the MessageBox:


Epsilon97
Attention, je vous ai contaminé…
HAHA !!!!!

The virus infects documents on saving with new name.


On entering the File/Templates menu it displays the MessageBox:


Microsoft Word
System Error!!!

and renames this menu item with “Epsilon97, c’est COOL!!!!” or “Mod les et
compl ments…” depending on system random counter.


On entering the Tools/Macro menu it displays the MessageBox:


Microsoft Word
User32 Error!!!!

and renames this menu item with “ZeMacroKiller98 va vous tonner…” or
“Macros”.


On April 18th the virus displays the MessageBox:


Epsilon97
C’est mon anniversaire, aujourd’hui

then it writes to the C:AUTOEXEC.BAT file the drive formatting
instruction, displays the MessageBox and reboot the computer:

Epsilon97
Au revoir….