| Description:
|
Details
Macro.Word.Moss
This is a Word macro virus. It contains nine macros: Moss, Stealth, AutoExec, AutoOpen, AutoClose, ToolsMacro, HerramMacro, FileTemplates, ArchivoPlantillas.
The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved (FileSave, FileSaveAs).
The virus sets new ScreenSaver Windows - it draws the text depending on the Word local version:
Spain: Saludos de Moss ;o) DarkSide1
Others: Greetings from Moss ;o) DarkSide1
On closing a document depending on the random counter appends to the end of document on of the texts:
Spain: :o) La flaquis de MOSS :o)
Others: :o) I'm so happy with MOSS :o)
Stealth: on entering Tools/Macro or File/Templates menus the virus displays DialogBox in Spain or English, that DialogBox looks like original Word DialogBox. |
