Details
Macro.Word.BlackEnd

This is an encrypted virus, it contains five macros: BlackEnd, AutoNew, AutoClose, AutoExec, AutoOpen. The system and files get infection on AutoOpen and AutoExec. The virus also infects the files on AutoNew and AutoClose.
On May 22nd the virus creates new template and inserts the string to there:
You are infected with the BlackEnd Virus! [D.K.]

Then it creates and executes the C:\DOSYS.BAT file containing the commands:
echo off
doskey Fun=setver win.com 3.00
echo off
Fun

Related Posts

This entry was posted on Thursday, January 22nd, 2009 at 4:15 pm and is filed under Virus Threats.