Kaspersky Threats

Class

Platform

Description

Technical Details

This virus contains three modules: KidChaos, SLAM, and Greetz, and replicates
upon document opening. Depending on the system’s random counter, it displays the
following list Balloon:



Word97.Greetz by Kid Chaos [SLAM]

Greetings to SLAM friends:

Virtual Daemon

Aurodreph

CyberYoda

Darx Kies

Forms

rAiD

Shaitan

Stealth Warrior

Trigger

Yesna

Upon entering Help/About beginning on the 13th of any month, the virus displays the
following MessageBox:



About WM97.Greetz… 🙂

====> (c) 1998 by Kid Chaos <========>  of SLAM Virus Team  <====
Hey Bill Gates, do you like other cake on your face? 😀

Upon entering the macro-editing menus, the virus, depending on the current date,
sets passwords for the current document:



Menu item                   Trigger day       Password

File/Templates                 13             KidChaos

Tools/Macro                     1             WeRoqs

Tools/Macro/WordBasicEditor    20             SLAM98

Class	Virus
Platform	MSWord
Description	Technical Details This virus contains three modules: KidChaos, SLAM, and Greetz, and replicates upon document opening. Depending on the system’s random counter, it displays the following list Balloon: Word97.Greetz by Kid Chaos [SLAM] Greetings to SLAM friends: Virtual Daemon Aurodreph CyberYoda Darx Kies Forms rAiD Shaitan Stealth Warrior Trigger Yesna Upon entering Help/About beginning on the 13th of any month, the virus displays the following MessageBox: About WM97.Greetz… 🙂 ====> (c) 1998 by Kid Chaos <========> of SLAM Virus Team <==== Hey Bill Gates, do you like other cake on your face? 😀 Upon entering the macro-editing menus, the virus, depending on the current date, sets passwords for the current document: Menu item Trigger day Password File/Templates 13 KidChaos Tools/Macro 1 WeRoqs Tools/Macro/WordBasicEditor 20 SLAM98

Virus.MSWord.Greetz

Technical Details