Virus.MSWord.Ler

Class Virus
Platform MSWord
Description

Technical Details


This is an encrypted macro virus. It contains two macros in documents:
AutoOpen, hitler; and four macros in NORMAL.DOT: AutoExec, AutoOpen,
Autoeopen, hitler.


The virus replicates on opening a document. On April 15 the virus displays
the MessageBox:


Hitler
India Is Great

The virus creates random named directories on the C: drive and creates the
HITLER.TXT file in there. These files contain the text:

MSWORD is infected by a new virus HITLER
Date =
Time =