Technical Details
This virus contains one procedure “Document_Open” in one module. The virus
infects the global macros area on opening an infected document. Other
documents get infection on their opening. While infecting the virus turns
off the Word virus protection (the VirusProtection option).
On every document open the virus attacks (floods) four internet web
servers. For that it executes system program that continuesly sends ICMP
packets. This kind of attack slow down or even crashed attacked server and
also overflows user internet channel. This program virus runs four times,
one copy for each server from the list:
innocentangels.com
whitesonly.net
kkk.com
daddysgirl.com
|
English
Russian
Japanese
LatAm
Türkiye
Brasil
France
Český
Deutschland
