| Description:
|
Details
Macro.Word.BadBoy.a
This is an encrypted virus, it contains five macros: AutoOpen, FileSaveAs, BadBoy, AutoExec, FileNew. The virus infects the system on AutoOpen and writes itself to files on FileSaveAs.
While infecting a document the virus also sets new FileSummaryInfo:
Author = "Kenny-G sux"
Keywords = "Gangsta Rappa"
Comments = "The Mutha mix"
On AutoOpen, if the system is already infected and current day is 1st or 13th, the virus displays the message boxes:
Mack daddy
Bad Boy, Bad Boy, What u gonna do
the Gangsta Rappa
What u gonna do when they come for you
BMF
The Gangsta owns you !
BMF
Have a happy new year !
Then it sets the password for current document: "gangsta".
To hide itself in the system the virus on FileNew, AutoExec and AutoOpen removes the menus Tools/Macro, Tools/Customize, File/Templates. |
