Class | Virus |
Platform | MSWord |
Description |
Technical Details
When an infected document is opened (AutoOpen), the virus infects the global macros area. Then it writes itself to documents that are opened (FileOpen) or saved with a new name (FileSaveAs). The ToolsMacro and FileTemplates are the stealth macros – they disable the corresponding Word menus.
Then the virus prints the message to the status line:
On November 1st the virus prints the same message, then displays the MessageBox:
The virus then checks the system timer, and if current seconds counter is equal to 1 or 11 the virus calls the disk erasing function:
|
Find out the statistics of the threats spreading in your region |