Description |
Technical Details
These viruses contain only one macro in infected documents – AutoOpen, but
while infecting the system they copy it to three macros – AutoOpen,
AutoNew and AutoClose. As a result, the virus infects the system on opening
an infected document, and infects the documents that are opened, created or
closed.
On 13th of any month “TWNO.a” displays and inserts into current document
the messages in Chinese and:
NO.1 Macro Virus
On 25th of any month “TWNO.b” deletes the files C:DOS*.*,
C:WINDOWS*.INI, renames menus, displays the messages in Chinese and:
MERRY CHRISTMAS
On 15th of any month this virus deletes the files: C:COMMAND.COM,
C:AUTOEXEC.BAT, C:CONFIG.SYS, C:MSDOS.SYS, C:IO.SYS
“TWNO.c” on created a new documet insert the text string:
A monkey has controlled your Word!!!
|