| Description:
|
Details
Macro.Word97.Dna
This is a stealth macro virus. It contains ten macros in one module "DNA": AutoOpen, AutoClose, AutoExit, FileSaveAs, filesave, fileclose, fileprint, viewvbcode, ToolsMacro, FileTemplates.
The virus replicates itself on documents opening, closing, saving and saving with new name documents. It infects the system twice: infects the NORMAL.DOT file by using the export/import virus code through the C:DNA.SYS file, then it saves the current infected document in the Excel startup directory.
The virus creates and runs the C:.COM infected with the "Dna.1206" DOS parasitic virus. On entering the "Tools/Macro/Visual Basic Editor" menu the virus displays the MessageBox:
MS Word message
Visual Basic not available. |
