Virus.MSWord.GreenFury

Class Virus
Platform MSWord
Description

Technical Details


This is a very dangerous Word macro virus. It does replicate only under the
Italian Word version. The virus contains three original macros, but while
infecting it copies them to four macros with the names:


NORMAL.DOT Infected files
Macro1 GreenFury GreenFury
Macro2 FileSalvaConNome GGGFFF
GGGFFF
Macro3 FFFGGG FFFGGG
AutoOpen

The virus infects the global macros area on AutoOpen and writes itself to
files on FileSalvaConNome (FileSaveAs).


Under non-Italian Word the virus erases all files in current directory.
Depending on the system random counter the virus sets the random selected
password for current document.