Virus.MSWord.Twno

Class Virus
Platform MSWord
Description

Technical Details


These viruses contain only one macro in infected documents – AutoOpen, but
while infecting the system they copy it to three macros – AutoOpen,
AutoNew and AutoClose. As a result, the virus infects the system on opening
an infected document, and infects the documents that are opened, created or
closed.


On 13th of any month “TWNO.a” displays and inserts into current document
the messages in Chinese and:


NO.1 Macro Virus

On 25th of any month “TWNO.b” deletes the files C:DOS*.*,
C:WINDOWS*.INI, renames menus, displays the messages in Chinese and:

MERRY CHRISTMAS

On 15th of any month this virus deletes the files: C:COMMAND.COM,
C:AUTOEXEC.BAT, C:CONFIG.SYS, C:MSDOS.SYS, C:IO.SYS


“TWNO.c” on created a new documet insert the text string:


A monkey has controlled your Word!!!