Virus.MSWord.Surabaya

Class Virus
Platform MSWord
Description

Technical Details


This macro virus contains six macros: AutoOpen, FileSaveAs, Autoexec,
ToolsMacro, FileTemplates, Plong. It infects the global macros area on
opening an infected document (AutoOpen) and writes itself to documents that
are saved with new name (FileSaveAs).


While installing into the system the virus creates new profile section (the
WIN.INI file):


[Author]
Name=TeBeYe`93 The ICE-Man”

When already infected Word is started (AutoExec), the virus prints to the
status line the text:

Lontong Micro Device (c) 1993 By ICE-Man

Macro Plong contains the remarked text:

This Macro was created by : The ICE – “Yes” Man
Allah Swt always be with All of You ….
Surabaya, 09-09-1996

On entering File/Templates and Tools/Macro menus the virus displays the
MessageBox:

Sorry…