|
|
Macro.Word.Formate Viruses Information
| Name: |
Macro.Word.Formate |
| Category: |
Viruses |
| Description:
|
Details
Macro.Word.Formater
The virus contains five macros: AutoExec, AutoOpen, DLLError, ToolsMacro, ToolsCustomize. It replicates on opening documents.
In the WIN.INI file in the [Formater] section in the Activated string the virus keeps the counter that is increased on each loading Word with infected NORMAL.DOT.
On starting Word on August 20 the virus creates a new document and runs the text there:
Word Macro Virus Formater!!! by Formater . This is my birthday!
I'm <1998 minus current year number> years old! Don't try to find meall
On entering the Tools/Macro or Tools/Customize menu the virus displays the MessageBox:
Formater
Cannot find FORMATER.DLL. Windows
needs this file to run winword.exe
On entering the same menus on August 20 the virus displays the InputBox and waits for "Formater" input, otherwise it exits the Windows:
Formater
I'm a Word Macro Virus! I said: 'Don't try to find me!!!' You didn't
listen to me! Enter my name, or I will quit from Word without saving
documents! (do not press Cancle)
The virus contains the comments:
_____ ___ ____ __ __ _ _____ _____ ____
| ___/ _ | _ | / | / |_ _| ____| _ | |_ | | | | |_) | |/| | / _ | | | _| | |_) |
| _|| |_| | _ <| | | |/ ___ | | | |___| _ <
|_| ___/|_| __| |_/_/ __| |_____|_| _The Word Macro Virus by Formater '98 |
Top Viruses Visited Pages:
Invader. - 241 visits
not-a-virus:RiskWare.Tool.RegPatch. - 73 visits
Worm.P2P.Harex. - 67 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win32.Hidra - 43 visits
Win16.Klon.1177 - 42 visits
Marine.500 - 35 visits
Random Viruses Pages:
Frodo.
Macro.Word.Dus
Trojan-Dropper.Win32.VB.i
Hymn.1865.
Freak.93
Attention.39
Animals.2400.
Quark.160
Dwbomk.60
Macro.Word.Goldse
|
|
