Technical Details
It contains six macros in one module “Epsilon”: AutoExec, AutoOpen,
FileSaveAs, FileTemplates, ToolsMacro, ViewVBCode.
The virus infects the global macros area on opening an infected document,
after infection the virus displays the MessageBox:
Epsilon97
Attention, je vous ai contaminé…
HAHA !!!!!
The virus infects documents on saving with new name.
On entering the File/Templates menu it displays the MessageBox:
Microsoft Word
System Error!!!
and renames this menu item with “Epsilon97, c’est COOL!!!!” or “Mod les et
compl ments…” depending on system random counter.
On entering the Tools/Macro menu it displays the MessageBox:
Microsoft Word
User32 Error!!!!
and renames this menu item with “ZeMacroKiller98 va vous tonner…” or
“Macros”.
On April 18th the virus displays the MessageBox:
Epsilon97
C’est mon anniversaire, aujourd’hui
then it writes to the C:AUTOEXEC.BAT file the drive formatting
instruction, displays the MessageBox and reboot the computer:
Epsilon97
Au revoir….
|