Virus.MSWord.Pesan

Class Virus
Platform MSWord
Description

Technical Details


This is an encrypted Word macro virus. It contains five macros:


Documents: NORMAL.DOT:
pesan pesan
CopyOfFileSave FileSave
CopyOfFileExit FileExit
AutoOpen CopyOfAutoOpen
NormalAuto AutoExec

The virus infects the global macros area (NORMAL.DOT) on opening an
infected document and writes itself to documents that are saved or closed.


Every five minutes it displays the MessageBoxes, but does not perform any
action listed in there:


MicroSoft Warning!!!
You are about Formatting Hardisk, Are you sure?
FORMAT WARNING !!!
You have just activate the format.exe trigger,
all command will FORMAT your hardisk
SYSTEM DAMAGE WARNING !!!
System detected ‘Bandung.d_t’ VIRUS, all system will be
Damage Permanently !!! May God Have Mercy On you ….!!!