| Description:
|
Details
Macro.Word97.Edds
This virus contains twenty macros in one module - "EddsHead". The virus replicates itself upon execution any of its macros.
The virus contains the comments:
Produced by,
The VicodinES Macro.Poppy Construction Kit v1.0b
================================================
Code Written by VicodinES "Live for Now"
Poppy ID : 24421479963
If the NORMAL.DOT file has the ReadOnly attribute set, the virus creates the C:WINDOWSSTARTM~1PROGRAMSSTARTUPMSFILE.BAT file that upon rebooting clears this attribute and erases the NORMAL.DOT.
The virus replaces the disks' icons. Depending on a random counter, the virus displays the following MessageBox:
Your Computer Has The Edds Head Virus
On February 14 (Valentine's Day), it displays the following MessageBox:
Birthday Greeting!!!
I Hope You Got Your Girlfriend Something Nice !
Depending on a random counter, the virus copies the current file to a randomly selected disk from F: to S: with one of the following names: PORNO.DOC, README!.DOC or SEX.DOC. |
