This is an encrypted Word macro virus. It contains three macros: AutoExec, AutoOpen, BlackDeath. The virus replicates itself when documents are opened (AutoOpen).
On Friday 13th it prints the text to the status line:
Please waitall Scanning disk!
and deletes the files:
C:*.COM
C:WINDOWS*.INI
It then prints:
Please wait... Reading directories!
and deletes the files:
C:AOL30ORGANIZE*.*
C:AOL30IDB*.*
C:WINDOWS*.COM
C:WINDOWS*.HLP
C:WINDOWS*.CPL
C:WINDOWS*.BMP
C:*.EXE".
It then displays the MessageBoxes:
Your computer is now lost to the ages...
WM.BlackDeath
Written on 6/6/1997
