| Description:
|
Details
Macro.Word.Trash.a
These stealth macro viruses contains three encrypted macros:
Documents NORMAL.DOT
Save000 FileSaveAs,Save000
AutoOpen,Toolsmacro Toolsmacro
The viruses infect the global macros area on opening an infected document (AutoOpen) and write themselves to files that are saved with new name (FileSaveAs).
On July 24 the virus deleted the files C:COMMAND.COM, C:IO.SYS. If virus macros are executed, and the system time it exactly 55 seconds, the virus deletes the files A:*.*; if current time is less than 5 minutes, the virus searches and replaces words to expressions:
"hard" -> "fucking hard"
"easy" -> "a piece of piss"
"think" -> "fucking knows" |
