Virus.MSWord.Padania

Class Virus
Platform MSWord
Description

Technical Details


This virus contains seven macros in documents and nine macros in NORMAL.DOT:


Documents NORMAL.DOT
AutoOpen AutoOpen
AutoExec
Panza FileChiudi
BiPanza FileStampaPredef
TriPanza ChiudiDoc
Uscita FileEsci
Ranma FileStampa
Nomacro StrumMacro
FileModelli

It infects the global macro area on opening an infected document (AutoOpen) and writes itself to documents that are opened, saved or saved with new name
(FileOpen, FileSave, FileSaveAs).


When printing the virus replaces in documents all string “italia” with
“Padania”.