Virus.MSWord.Twister

Class Virus
Platform MSWord
Description

Technical Details


This virus does not manifest itself in any way. It contains eight macros:


NORMAL.DOT Infected documents
FileSaveAs twFSA
AutoExec twAE
twAC AutoClose
FileSave twFS
AutoExit twEX
twFC FileClose
twFE FileExit
twFQ FileQuit

The virus infects the global macros area on FileClose, FileExit and
AutoClose. The documents get infection on AutoExit, FileSave and
FileSaveAs.


The virus contains commented strings:


“Twister 2000” v.1 (c) Neo-Luddite Inc.
For Robin Hood