Virus.MSWord.Sunbeam

Class Virus
Platform MSWord
Description

Technical Details


This Word macro virus contains three macros: DocClose, SUNBEAM, FileOpen.
The virus infects the global macros area (NORMAL.DOT) on closing an active
window (DocClose) and writes itself to documents that are opened
(FileOpen).


On October 5th the virus creates and executes the random named file (<3 letters of current document name>DIE.BAT) that contains the text:


echo 123>clock$