Macro.Word97.Cascade
Description Macro.Word97.Cascade
This virus contains eight macros in one module "Cascade": AutoNew, AutoOpen, FileNew, FileSaveAs, FileTemplates, PayCascade, ToolsMacro, ViewVBCode. It infects the global macros area on opening an infected document (AutoOpen), and spreads itself to other documents on saving them with new name (FileSaveAs).
On creating a new document or file the virus displays one of the MessageBoxes:
Virus Cascade
Une CASCADE de lettre va s'afficher sur votre écranall
Virus Cascade
Je suis de retour...
The virus then manifests itself by video effect: it drops in the Word window random selected letters.
Check other viruses! Be aware! Use Antiviral Software
Macro.Word97.NightShade
Description Macro.Word97.NightShade
This macro virus contains only one macro named NightShade. This macro contains auto-function AutoClose that allows the virus to infect the system and documents on file closing. Depending on the system date and random counter the virus displays the text:
Attention:
Word97.NightShade by Pyro [VBB]
On Friday 13th it sets to documents the password "NightShade".
Macro.Word97.Nori
Description Macro.Word97.Nori
Nori is a dangerous macro virus that infects Microsoft Word documents upon opening or creating. As a result of the virus' activity the file "Iron.tmp" may appear in root folder of drive "C:".
On April 1st the virus checks the system registry's RegisteredOrganization key - if it is equal to "IRON" the virus destroys all files on drive "C:".
If the RegisteredOrganization key contains any other value the virus wipes out (deletes) the content of any document opened on April 1st.
|