|
|
Macro.Word.Talon. Viruses Information
| Name: |
Macro.Word.Talon. |
| Category: |
Viruses |
| Description:
|
Details
Macro.Word.Talon.b
This macro-virus contains five original macros that are copied with six different names while infecting the system and documents. All macros except the Info macro are encrypted.
Documents NORMAL.DOT
Macro1: FSAB FileSaveAs
FSAB
Macro2: AOB AOB
AutoOpen
Macro3: ToolsMacro ToolsMacro
Macro4: Info Info
Macro5: Password
The virus infects the global macros area upon opening an infected document (AutoOpen), and writes itself to files that are saved with new name (FileSaveAs).
Upon entering the Tools/Macro menu (ToolsMacro), the virus displays the following MessageBox:
Warning
This Option Is Not Available, Please Insert The MS-Office CD
And Install The Help Files To Continue.
On the 27th of any month, the virus sets the password "talon" for documents and displays the Message Boxes:
Warning
Your document Has Just been Been Saved, I Hope You Know The Password!!!",
Brought To You By Talon 1997"
The Info macro contains the comments:
*********************************************
Talon #1
June 18 Payload Activates
Displays Message
All Files Encrypted Except Info File
Brought To You By
"Talon"
********************************************* |
Top Viruses Visited Pages:
Invader. - 239 visits
not-a-virus:RiskWare.Tool.RegPatch. - 72 visits
Worm.P2P.Harex. - 66 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win16.Klon.1177 - 42 visits
Win32.Hidra - 42 visits
Marine.500 - 35 visits
Random Viruses Pages:
RMNS.MW.Woman.35
Nanjing Famil
Trojan.Durel
1stVir.317
RP.
Jerusalem.Havoc.307
Disruptor.112
WereWolf famil
Macro.Word97.Inexist.
Datacrime.1168.
|
|
