Class Virus
Platform MSWord

Technical Details

This virus contains one procedure “Document_Open” in one module. The virus
infects the global macros area on opening an infected document. Other
documents get infection on their opening. While infecting the virus turns
off the Word virus protection (the VirusProtection option).

On every document open the virus attacks (floods) four internet web
servers. For that it executes system program that continuesly sends ICMP
packets. This kind of attack slow down or even crashed attacked server and
also overflows user internet channel. This program virus runs four times,
one copy for each server from the list:

Find out the statistics of the threats spreading in your region