Macro.Word.Balrog
Details
Macro.Word.Balrog.a
This is the encrypted macro virus. It contains only one macros “AutoClose” and infects the global macros area and documents on File/Close call. This is a Spain-specific macro virus – it does work only under Spain-Word version. Under other versions it overwrites the C:\COMMAND.COM file with a copy of the current document.
Depending on a random counter it appends the text to the end of current document:
P.S.: You are a very stupid people.
P.S.: I hate you a lot.
P.S.: I wish your death.
P.S.: All the things I told you are lies.
P.S.: Call me if you need sex.
Related Posts