Virus.MSWord.ThisDocument

Class Virus
Platform MSWord
Description

Technical Details


This virus contains six macros in one module “ThisDocument”: AutoExec,
AutoOpen, FileSaveAs, FileTemplates, ToolsMacro, ViewVBCode.


The virus infects the global macros area on opening an infected document, and
while infecting, the virus also exports its code to the C:THISDOC.LOG file
and displays the MessageBox:


Virus ThisDoc
Attention, ThisDocument est infect�…

The virus infects documents on saving them with a new name, and it also displays
the following MessageBox while infecting:

Virus ThisDoc
Je suis une Nouvelle G�n�ration de Virus de Macro…

On entering the Tools/Macro menu, the virus displays the MessageBox:

Microsoft Word
Erreur Syst�me
Veuillez r�essayer plus tard

On calling the ViewVBCode macro, it displays the MessageBox:

Microsoft Word
Ce programme a r�alis� une op�ration ill�gale et va �tre interrompu.

On the 15th and any month, it displays the MessageBox:

Virus ThisDoc
ZeMacroKiller98 est heureux de vous pr�senter sa nouvelle cr�ation…

If the day number is equal to the hour, the virus displays the MessageBox:

Virus ThisDoc
Vos donn�es vont �tre d�truites…

and erases the files:

C:Windows*.INI
C:Windows*.COM