Kaspersky Threats

Class

Platform

Description

Technical Details

This macro virus contains four macros in documents and five in NORMAL.DOT:



Documents                    NORMAL.DOT

autoopents                   ILMD

dateispeichernunterV         DateiSpeichern, DateiSpeichernUnter

dateidruckenstandardV        DateiDruckenStandard

dateidruckenV                DateiDrucken

The virus infects the global macros area on opening documents. It infects
documents on saving and saving with new name.

On printing documents the virus replaces the “s” symbols with “t”. The
virus contains the comments:



************************************************************

*                     ILMD V1.0                            *

*                                                          *

* Written in November 1997 somewhere in Germany by Thebman *

*                                                          *

* Congratulations for decoding this file                   *

************************************************************

Class	Virus
Platform	MSWord
Description	Technical Details This macro virus contains four macros in documents and five in NORMAL.DOT: Documents NORMAL.DOT autoopents ILMD dateispeichernunterV DateiSpeichern, DateiSpeichernUnter dateidruckenstandardV DateiDruckenStandard dateidruckenV DateiDrucken The virus infects the global macros area on opening documents. It infects documents on saving and saving with new name. On printing documents the virus replaces the “s” symbols with “t”. The virus contains the comments: ************************************************************ * ILMD V1.0 * * * * Written in November 1997 somewhere in Germany by Thebman * * * * Congratulations for decoding this file * ************************************************************

Virus.MSWord.Thebman

Technical Details