Main Menu
Home
Bookmark
Contact Us



 
Macro.Word97.Silicon Viruses Information

Name: Macro.Word97.Silicon
Category: Viruses
Description: Details
Macro.Word97.SiliconC

The virus contains fourteen macros in one module "SiliconC": AutoOpen, AutoClose, FileSave, FileSaveAs, SendMail, Innocence, FilePrint, ToolsMacro (stealth), FilesTemplates, EditFind, ToolsWordCount, ViewVBCode, InfectDOC, and InfectGlob.
It infects the system macros area and documents upon calling one of these macros.
Upon closing files, saving or saving with new name, the virus sets a randomly selected password for documents. The virus also changes the mouse-button functions.
The virus sets document variables:
UserName = "Silicon Child"
UserInitials = "SC"
UserAddress = "532 Silicon Valley Kln. Angle Of Sin Loves You Stephanie"

In May, it displays the MessageBox:
Message from Global Network TCP/IP Instuction
I LOVE YOU STEPHANIEY

On August 28, it erases the files:
c:command.com
C:autoexec.bat
C:windowssystem.dat
C:windowssystem.da0
C:windowsuser.dat
C:windowsuser.da0

It then deletes all files in the "C:Progra~1" directory and displays the MessageBox:
Silicon Child -- By Angle Of Sin - POTion Forever
A WAR WIll BEING. BROUGHT ON BY NOT A RULER BUT A CHILD PROTECTED BY THE
ANGLE OF SIN. THIS WILL BE A DIGITAL WAR. ENERMIES USING THE LATEST
DEVICES OF TECHNOLOGY, IT WILL BE A WAR ABOUT ME AND YOU, GOVERNMENT AND
PRISONERS AND COPS AND CRIMINALS, THE WILL BE CALLED THE SILiCoN ChIlD.
The New World Will Be Run By The SiLiCon ChiLd and By The InFoMaTiOn
LibErAtIoN FrOnT.

Upon entering the Tools/Macro menu, it displays the MessageBox:
Fatal Systematic Error
An Invalid Command Was executed, the last processed command will be
terminated

It contains the comments:
This is a dedication to Stephanie Collinzallthe most beautiful girl in
the world.. May be I'm tripping right now but yea!. Thanks to ILF for
distributing Info....LONG LIVE ILF



Top Viruses Visited Pages:
Invader. - 234 visits
not-a-virus:RiskWare.Tool.RegPatch. - 72 visits
Worm.P2P.Harex. - 65 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 59 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 47 visits
Win16.Klon.1177 - 42 visits
Win32.Hidra - 42 visits
Marine.500 - 35 visits

Random Viruses Pages:
Div.72
Worm.Win32.Leav
Trojan.Win32.Erase2002.
Macro.Word97.Silicon
Mgn.2048.
HLLP.Nover.852
Macro.Word.Tenface
Win32.Trion.
CS.Gal
Topa.245


 


© 2006-2008 spyware32.com - Privacy Policy