Virus.MSWord.Kerranga

Class Virus
Platform MSWord
Description

Technical Details


This is a very dangerous virus. It contains five macros: Autoexec,
FileSaveAs, FileOpen, FilePrintDefault, ToolsMacro.


On Autoexec the virus disables Word virus protection, if it presents in the
Tools/Options/General menu, as well as prompt on NORMAL.DOT saving. On
FileOpen and FileSaveAs the virus runs its infection routine. On ToolsMacro
the virus opens 65 new documents, but does not execute original Tools/Macro
menu. On FilePrintDefault on 18:00 the virus appends to the end of document
the text:


Kerbaffely Urgo Kerranga! Kerranga!!!!

Then it deletes all *.DOC files in the current directory.