| Description:
|
Details
Macro.Word.Onyx.a
This encrypted German-specific virus contains one macro with different names in different infected documents: DateiSpeichern, or DateiÖffnen, or DateiSchließen. As a result the virus replicates on saving, or opening, or closing documents. While infecting a document the virus changes its macro name to a new one and stores it in the system registry in HKEY_USERS.DefaultSoftwareOnyx.
On October 27 the virus halts Pentium-computers. The virus contains the comment:
(08.03.1998) / Loving thoughts to T.E.S.S.A!
This was done by Onyx / Germany 1998 |
