Virus Database

Macro.Word.Temple

Description Macro.Word.Temple

This macro virus contains four macros that have different names in documents and NORMAL.DOT:
Documents NORMAL.DOT
TempAutoExec AutoExec
TempFileSave FileSave
TempFileOpen FileOpen
AutoOpen TempAutoOpen

While loading an infected document (AutoOpen) the virus infects the global macros area (NORMAL.DOT). On saving or opening a file (FileSave, FileOpen) the virus infects the current document.
The virus does not manifest itself in any way.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Opi

Description Macro.Word97.Opi

This is a stealth macro-virus. It contains six functions: AutoOpen, AutoClose, ToolsMacro, Toolscustomize, ViewVBcode, and OPIM. Upon opening a document, the virus disables the VirusProtection function. The virus replicates itself upon opening and closing documents (AutoOpen, AutoClose).
Upon entering the Tools/Macro menu, the virus sets the password "OPIM" for the current document and exits Windows. On Mondays, it replaces "the" with the "thee" string in the current document.

Macro.Word97.Oragon

Description Macro.Word97.Oragon

This macro virus infects MS Word documents as they are closed.
The code contains the following text string:
ORAGON
When an MS Word document is closed, the virus copies its code to all open documents and the normal.dot template.
The virus contains an internal infection count and increases it by 1 every time it infects a document. It adds blank lines to the end of its macro; the number of blank lines is the number of files infected.
It also turns off the Tools/Macro menu so the user will be unable to detect that the virus is present in the document.
On the 1st of every month, it changes the header of the current document window to the name of the system user and attempts to start the Office Assistant application.

Home