Macro.Word.BlackDeat
Details
Macro.Word.BlackDeath
This is an encrypted Word macro virus. It contains three macros: AutoExec, AutoOpen, BlackDeath. The virus replicates itself when documents are opened (AutoOpen).
On Friday 13th it prints the text to the status line:
Please waitall Scanning disk!
and deletes the files:
C:\*.COM
C:\WINDOWS\*.INI
It then prints:
Please wait… Reading directories!
and deletes the files:
C:\AOL30\ORGANIZE\*.*
C:\AOL30\IDB\*.*
C:\WINDOWS\*.COM
C:\WINDOWS\*.HLP
C:\WINDOWS\*.CPL
C:\WINDOWS\*.BMP
C:\*.EXE”.
It then displays the MessageBoxes:
Your computer is now lost to the ages…
WM.BlackDeath
Written on 6/6/1997
Related Posts