Macro.Word.Mos
Details
Macro.Word.Moss
This is a Word macro virus. It contains nine macros: Moss, Stealth, AutoExec, AutoOpen, AutoClose, ToolsMacro, HerramMacro, FileTemplates, ArchivoPlantillas.
The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved (FileSave, FileSaveAs).
The virus sets new ScreenSaver Windows – it draws the text depending on the Word local version:
Spain: Saludos de Moss ;o) DarkSide1
Others: Greetings from Moss ;o) DarkSide1
On closing a document depending on the random counter appends to the end of document on of the texts:
Spain: 
) La flaquis de MOSS )
Others: ) I’m so happy with MOSS )
Stealth: on entering Tools/Macro or File/Templates menus the virus displays DialogBox in Spain or English, that DialogBox looks like original Word DialogBox.
Related Posts