|
|
Macro.Word.Talon. Viruses Information
| Name: |
Macro.Word.Talon. |
| Category: |
Viruses |
| Description:
|
Details
Macro.Word.Talon.c
This macro-virus contains five original macros that are copied with six different names while infecting the system and documents. All macros except the Info macro are encrypted.
Documents NORMAL.DOT
Macro1: FSAB FileSaveAs
FSAB
Macro2: AOB AOB
AutoOpen
Macro3: ToolsMacro ToolsMacro
Macro4: Info Info
Macro5: ToolsSpelling
The virus infects the global macros area upon opening an infected document (AutoOpen), and writes itself to files that are saved with new name (FileSaveAs).
Upon entering the Tools/Macro menu (ToolsMacro), the virus displays the following MessageBox:
Warning
This Option Is Not Available, Please Insert The MS-Office CD
And Install The Help Files To Continue.
In June on Mondays, the virus sets for documents the password "talon3" and displays Message Boxes:
Warning
I Have A Word For You To Spell V I R U S
Your document Has Just been Been Saved By The Word Macro Virus
Talon #3, I Hope You Know The Password!!!
Brought To You By Talon 1997
The Info macro contains the comments:
*********************************************
Talon #1
June 18 Payload Activates
Displays Message
All Files Encrypted Except Info File
Brought To You By
"Talon"
********************************************* |
Top Viruses Visited Pages:
Invader. - 231 visits
not-a-virus:RiskWare.Tool.RegPatch. - 69 visits
Worm.P2P.Harex. - 63 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 55 visits
Small.58. - 55 visits
Coito.64 - 53 visits
I-Worm.Mapson. - 45 visits
Win16.Klon.1177 - 41 visits
Win32.Hidra - 41 visits
Marine.500 - 34 visits
Random Viruses Pages:
Saturday1
K_Hate.112
Sov.119
Michael.145
Puppets.96
TME.64
Win32.Ditto.148
Nymphet.102
Remember.81
APME.Demo.62
|
|
