Main Menu
Home
Bookmark
Contact Us



 
Macro.Word.Nostradamus famil Viruses Information

Name: Macro.Word.Nostradamus famil
Category: Viruses
Description: Details
Macro.Word.Nostradamus family

This Italian Word macro virus contains three or four macros depending on the virus' version:
"Nostradamus.a": MacroOnFile, StrumMacro, AutoOpen
"Nostradamus.b": MacroOnFile, StrumMacro, AutoOpen, FileModelli

While infecting the NORMAL.DOT the virus copies the MacroOnFile macro with the the FileSalva name.
The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen), and writes itself to documents that are saved (FileSalva).
This is the stealth virus: on entering Tools/Macro and File/Temlates menus it draws its own Dialogs (in Italian).
On 31st of any month the virus displays the MessageBox:
NOSTRADAMUS Virus
Barbaro impero dal terzo sarai soggiogato,
Gran parte d'individui della sua origine farà perire:
Per decesso senile avverrà la sua fine, il quarto colpirà
Per timore che il sangue con il sangue morte ne derivi.
Centuria 3%, LIX



Top Viruses Visited Pages:
Invader. - 239 visits
not-a-virus:RiskWare.Tool.RegPatch. - 73 visits
Worm.P2P.Harex. - 66 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win32.Hidra - 43 visits
Win16.Klon.1177 - 42 visits
Marine.500 - 35 visits

Random Viruses Pages:
Kerplunk.305
DirVirus.69
Macgyver.109
Vengence famil
HXH.157
Dune.64
Ekaterinbur
Justic
Ostap.32
Macro.Word.Kiffe


 


© 2006-2008 spyware32.com - Privacy Policy