Virus.MSWord.Four

Class Virus
Platform MSWord
Description

Technical Details


This virus contains one macros in document AutoOpen, and four macros in
NORMAL.DOT: AutoClose, FileTemplates, NoMercy, ToolsMacro.


It infects the global macro area on opening an infected document
(AutoOpen), and infects documents that are closed (AutoClose). In some
cases it sets on documents a password consisting the current time.


The virus creates the AutoClose, FileTemplates, ToolsMacro macros in
NORMAL.DOT by entering lines of text (line by line). At the beginning of
each macro there is the comment:


/———————————————————-| Virus name: 4in1 (Four in One) |
| Origin : Indonesia, Yogyakarta |
| Author : Foxz [NoMercy] July 97 |
| URL&eMail : You Know it !! 🙂 |
———————————————————-/