| Description:
|
Details
Macro.Word97.GamesVirus
This virus contains seven macros in one module "GamesVirus": AutoExec, AutoOpen, FileSaveAs, FileTemplates, PayLoad, ToolsMacro, ViewVBCode.
It infects the global macros area on opening an infected document and infects documents on opening or saving with new name.
On entering the Tools/Macro and File/Templates menus the virus displays the MessageBoxes:
Microsoft Word
accès refusé!!!!
Microsoft Word
Fonction Sub inconnu
Depending on the system date and time the virus manifests itself in several ways. If current number of seconds is 1, the virus writes to the Subject field in FileSummaryInfo the text:
GamesVirus est avec vous, HAHA !!
If current number of minutes is 1, the virus writes the string to the StatusBar:
Remerciement à GamesVirus et à son auteur: ZeMacroKiller98
On tje 1st of any month it calls the Payload macro which displays several MessageBoxes and user forms. Depending on user's input the virus display MessageBoxes, erases system files, appends to the end of C:AUTOEXEC.BAT file instructions that format the hard disk, or in cycle draws the text in the status line:
Tu es le meilleur, bravo de la part de GamesVirus et de son auteurall. |
