Prevent Online Threats

Macro.Word97.Anthra

Details
Macro.Word97.Anthrax

This virus contains seven macros in one module “Anthrax”: FileNew, AutoNew, AutoOpen, Anthrax, FileSaveAs, FileTemplates, ToolsMacro, ViewVBCode.
It infects documents on saving with new name (FileSaveAs). It infects NORMAL.DOT on opening an infected document, the virus then displays the MessageBox:
Virus Anthrax
Modèle Normal infecté!!!!

On entering menu “Tools/Macro” the virus displays the Balloon:
Virus Anthrax
Attention, ce menu n’est pas autoriséall

On entering menu “Tools/FileTemplates and Add-Ins…” the virus displays the MessageBox:
Virus Anthrax
Le virus ANTHRAX ne peut pas vous autoriser l’accès!!!
HAHAHAHAHA!!!!

On creating new document it displays the MessageBox:
Virus Anthrax
Anthrax est en train de contaminer votre ordinateur!!!!

Depending on system random counter the virus either erases the files: C:\AUTOEXEC.BAT, C:\CONFIG.SYS, C:\WINDOWS\SYSTEM\*.DLL, or creates and runs disk formatting program, or displays to the StatusBar the running string:
HAHAHAHAHA!!!!, Je m’appelle Anthrax et je vais détruire ton ordinat!!!

Related Posts

  • Macro.Word97. Appder, Cap, Concept, Czech, Muck,
  • Macro.Word97.Claud
  • Macro.Word97.Apmr
  • Macro.Word97.Baw
  • Macro.Word97.Minima
  • Leave a Reply


    Spyware Removal Spyware Protection Tools