Virus.MSWord.Twno

Home Threats Virus Virus.MSWord.Twno

Class	Virus
Platform	MSWord
Description	Technical Details These viruses contain only one macro in infected documents – AutoOpen, but while infecting the system they copy it to three macros – AutoOpen, AutoNew and AutoClose. As a result, the virus infects the system on opening an infected document, and infects the documents that are opened, created or closed. On 13th of any month “TWNO.a” displays and inserts into current document the messages in Chinese and: NO.1 Macro Virus On 25th of any month “TWNO.b” deletes the files C:DOS., C:WINDOWS*.INI, renames menus, displays the messages in Chinese and: MERRY CHRISTMAS On 15th of any month this virus deletes the files: C:COMMAND.COM, C:AUTOEXEC.BAT, C:CONFIG.SYS, C:MSDOS.SYS, C:IO.SYS “TWNO.c” on created a new documet insert the text string: A monkey has controlled your Word!!!

Technical Details