Class Virus
Platform MSWord

Technical Details

This macro virus contains only one macro named NightShade. This macro
contains auto-function AutoClose that allows the virus to infect the system
and documents on file closing. Depending on the system date and random
counter the virus displays the text:

Word97.NightShade by Pyro [VBB]

On Friday 13th it sets to documents the password “NightShade”.

Find out the statistics of the threats spreading in your region