Virus.MSWord.Nori

Technical Details

Nori is a dangerous macro virus that infects Microsoft Word documents upon opening or creating. As a result of the virus’ activity the file “Iron.tmp”
may appear in root folder of drive “C:”.

On April 1st the virus checks the system registry’s RegisteredOrganization key – if it is equal to “IRON” the virus destroys all files on drive “C:”.

If the RegisteredOrganization key contains any other value the virus wipes out (deletes) the content of any document opened on April 1st.