Class Virus
Platform MSWord

Technical Details

Nori is a dangerous macro virus that infects Microsoft Word documents upon opening or creating. As a result of the virus’ activity the file “Iron.tmp”
may appear in root folder of drive “C:”.

On April 1st the virus checks the system registry’s RegisteredOrganization key – if it is equal to “IRON” the virus destroys all files on drive “C:”.

If the RegisteredOrganization key contains any other value the virus wipes out (deletes) the content of any document opened on April 1st.

Find out the statistics of the threats spreading in your region