Kaspersky Threats

Class

Platform

Description

Technical Details

It contains six macros in one module “Epsilon”: AutoExec, AutoOpen,
FileSaveAs, FileTemplates, ToolsMacro, ViewVBCode.

The virus infects the global macros area on opening an infected document,
after infection the virus displays the MessageBox:



Epsilon97

Attention, je vous ai contaminé…

HAHA      !!!!!

The virus infects documents on saving with new name.

On entering the File/Templates menu it displays the MessageBox:



Microsoft Word

System Error!!!

and renames this menu item with “Epsilon97, c’est COOL!!!!” or “Mod les et
compl ments…” depending on system random counter.

On entering the Tools/Macro menu it displays the MessageBox:



Microsoft Word

User32 Error!!!!

and renames this menu item with “ZeMacroKiller98 va vous tonner…” or
“Macros”.

On April 18th the virus displays the MessageBox:



Epsilon97

C’est mon anniversaire, aujourd’hui

then it writes to the C:AUTOEXEC.BAT file the drive formatting
instruction, displays the MessageBox and reboot the computer:



Epsilon97

Au revoir….

Class	Virus
Platform	MSWord
Description	Technical Details It contains six macros in one module “Epsilon”: AutoExec, AutoOpen, FileSaveAs, FileTemplates, ToolsMacro, ViewVBCode. The virus infects the global macros area on opening an infected document, after infection the virus displays the MessageBox: Epsilon97 Attention, je vous ai contaminé… HAHA !!!!! The virus infects documents on saving with new name. On entering the File/Templates menu it displays the MessageBox: Microsoft Word System Error!!! and renames this menu item with “Epsilon97, c’est COOL!!!!” or “Mod les et compl ments…” depending on system random counter. On entering the Tools/Macro menu it displays the MessageBox: Microsoft Word User32 Error!!!! and renames this menu item with “ZeMacroKiller98 va vous tonner…” or “Macros”. On April 18th the virus displays the MessageBox: Epsilon97 C’est mon anniversaire, aujourd’hui then it writes to the C:AUTOEXEC.BAT file the drive formatting instruction, displays the MessageBox and reboot the computer: Epsilon97 Au revoir….