Macro.Word97.Nor
Details
Macro.Word97.Nori
Nori is a dangerous macro virus that infects Microsoft Word documents upon opening or creating. As a result of the virus’ activity the file “Iron.tmp” may appear in root folder of drive “C:”.
On April 1st the virus checks the system registry’s RegisteredOrganization key – if it is equal to “IRON” the virus destroys all files on drive “C:”.
If the RegisteredOrganization key contains any other value the virus wipes out (deletes) the content of any document opened on April 1st.
Related Posts