Kaspersky Threats

Class

Platform

Description

Technical Details

This is an encrypted Word macro virus. It contains 5 macros in documents
and 10 in NORMAL.DOT:



Documents   NORMAL.DOT

LPT1        FileOpen, LPT1

LPT2        FilePrint, LPT2

Canon       FileSaveAs, Canon

Epson       Epson, FileTemplates, ToolsMacro

AutoOpen    AutoOpen

The virus infects the global macros area (NORMAL.DOT) on opening an
infected document (AutoOpen) and writes itself to documents that are saved
with new name (FileSaveAs).

On entering the Tools/Macro the virus displays the MessageBox:



Weeee Weeee

On printing documents the virus writes to the status line the message and
draws it to right:



Know what Dwira Oktorianto is, before it is too late

Class	Virus
Platform	MSWord
Description	Technical Details This is an encrypted Word macro virus. It contains 5 macros in documents and 10 in NORMAL.DOT: Documents NORMAL.DOT LPT1 FileOpen, LPT1 LPT2 FilePrint, LPT2 Canon FileSaveAs, Canon Epson Epson, FileTemplates, ToolsMacro AutoOpen AutoOpen The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved with new name (FileSaveAs). On entering the Tools/Macro the virus displays the MessageBox: Weeee Weeee On printing documents the virus writes to the status line the message and draws it to right: Know what Dwira Oktorianto is, before it is too late

Virus.MSWord.Printer

Technical Details