Virus.MSWord.Opey

Class Virus
Platform MSWord
Description

Technical Details



This macro virus contains fifteen macros in one module “A_OPEY_0x”:
greetings, OnlyYou, A_OPEY_05, filesave, fileclose, FileExit, FileNew,
AutoOpen, AutoExec, FileSaveAs, FilePageSetup, fileprint, Fileopen,
AutoClose, AutoExit.


The virus infects the global macros area on opening an infected document
(AutoOpen), and infects other documents on run of any of its auto-macros.
While infecting the virus disable menus: “Tools/Macro”,
“Tools/Customize…”, “Tools/Templates And Add-Ins”. It also disable and
hides the “Visual Basic” toolbar and turn off the Word virus protection
(the VirusProtection option).


The virus changes the user’s information:



UserName = “OPEY A.”
UserAddress = “CNNHS B’92 PHILIPPINES (CNSC)”
UserInitials = “LOVE”


Depending on the current date the virus appends to the AUTOEXEC.BAT file
one of the congratulations:



echo MERRY CHRISTMASS AND A HAPPY NEW YEAR !!!
echo HAPPY HALLOWEEN !!!
echo HAPPY VALENTINES DAY !!!
echo HAPPY LABOR DAY !!!
echo BONIFACIO DAY !!!
echo RIZAL DAY !!!
echo HAPPY INDEPENDENCE DAY !!!
echo HOLY WEEK !!!


and commands:



echo from: OPEY A.
pause