Class Virus
Platform MSWord

Technical Details

This virus contains seven macros in one module “GamesVirus”: AutoExec,
AutoOpen, FileSaveAs, FileTemplates, PayLoad, ToolsMacro, ViewVBCode.

It infects the global macros area on opening an infected document and
infects documents on opening or saving with new name.

On entering the Tools/Macro and File/Templates menus the virus displays the

Microsoft Word
accès refusé!!!!
Microsoft Word
Fonction Sub inconnu

Depending on the system date and time the virus manifests itself in several
ways. If current number of seconds is 1, the virus writes to the Subject
field in FileSummaryInfo the text:

GamesVirus est avec vous, HAHA !!

If current number of minutes is 1, the virus writes the string to the

Remerciement à GamesVirus et à son auteur: ZeMacroKiller98

On tje 1st of any month it calls the Payload macro which displays several
MessageBoxes and user forms. Depending on user’s input the virus display
MessageBoxes, erases system files, appends to the end of C:AUTOEXEC.BAT
file instructions that format the hard disk, or in cycle draws the text in
the status line:

Tu es le meilleur, bravo de la part de GamesVirus et de son auteur….

Find out the statistics of the threats spreading in your region