Virus.MSWord.Pejuang

Class Virus
Platform MSWord
Description

Technical Details


This virus contains three macros:


Documents: NORMAL.DOT:
Perjuangan FileSaveAs
AutoOpen Revolusi
Public Public

The virus infects the global macros area (NORMAL.DOT) on opening an
infected document and writes itself to documents that are saved with new
name. Depending on current date it erased system files or formats the C:
drive. The virus contains comments:

YOGYAKARTA 96
PESAN INI UNTUK MENGETUK HATI NURANI RAKYAT
MARI BERJUANG BERSAMA KAMI
TEGAKKAN KEADILAN YANG TELAH DIINJAK-INJAK
UNDERGROUND PUBLIC MESSAGES
!!!!!!!!!!!!!!!!!!!!!!!!!