Kaspersky Threats — GreenFury

Class

Platform

Description

Technical Details

This is a very dangerous Word macro virus. It does replicate only under the
Italian Word version. The virus contains three original macros, but while
infecting it copies them to four macros with the names:



NORMAL.DOT       Infected files

Macro1  GreenFury         GreenFury

Macro2  FileSalvaConNome  GGGFFF

GGGFFF

Macro3  FFFGGG            FFFGGG

AutoOpen

The virus infects the global macros area on AutoOpen and writes itself to
files on FileSalvaConNome (FileSaveAs).

Under non-Italian Word the virus erases all files in current directory.
Depending on the system random counter the virus sets the random selected
password for current document.

Find out the statistics of the threats spreading in your region

Class	Virus
Platform	MSWord
Description	Technical Details This is a very dangerous Word macro virus. It does replicate only under the Italian Word version. The virus contains three original macros, but while infecting it copies them to four macros with the names: NORMAL.DOT Infected files Macro1 GreenFury GreenFury Macro2 FileSalvaConNome GGGFFF GGGFFF Macro3 FFFGGG FFFGGG AutoOpen The virus infects the global macros area on AutoOpen and writes itself to files on FileSalvaConNome (FileSaveAs). Under non-Italian Word the virus erases all files in current directory. Depending on the system random counter the virus sets the random selected password for current document.
	Find out the statistics of the threats spreading in your region

Virus.MSWord.GreenFury

Technical Details