This is a stelth macro-virus. It infects the global macros area (NORMAL.DOT template) on infected document opening. Other documents get infected on their opening, closing and saving. While infecting a document, the virus adds the AutoCorrect entry t... [More]

This is an encrypted German Word specific macro virus. It contains nine macros:dateischlie遝n, dokumentschlie遝n, dok, dsu, wrd, extrasmakro, dateispeichern, dateidokvorlagen, dateispeichernunterIn June it displays the MessageBox with the text:Lisa, ... [More]

This is a German Word macro virus. It contains four macros: AutoOpen (NORMAL.DOT - ZMB), ExtrasMakro, DateiDrucken, DateiSpeichern.The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to d... [More]

It is a dangerous Word macro virus. It contains three macros: AutoOpen, ArquivoAbrir, ArquivoSalvarComo. The virus infects the global macro area on opening an infected document (AutoOpen), and writes itself to documents on opening (ArquivoAbrir) and ... [More]

The virus contains one macro "AutoClose" in module "Xute". It replicates on closing documents by exporting/importing its code through the C:\XUTE.DAT file. On July 26th, or if the sum of the day and month numbers is equal to 30, the virus execut... [More]

This is a dangerous Word macro virus. It contains six macros: WordDE, AutoExec, FileOpen, FilePrint, FileSaveAs, AutoOpen (WordSU in NORMAL.DOT). It infects the system on opening an infected document (AutoOpen), it infects documents that are opened (... [More]

This is an encrypted Word macro virus. It contains 16 macros: Halim, FileNew, AutoOpen, FileOpen, FileSave, FileClose, FilePrint, HelpAbout, Williamto, FileSaveAs, ToolsMacro, FormatStyle, JustifyPara, ViewToolBars, FileTemplates, ToolsCustomize.The ... [More]

This macro virus contains seven macros and functions in single module "WNW": AutoExec, AutoOpen, FileSaveAs, WNWP, FileTemplates, ToolsMacro, ViewVBCode. The virus infects the global macros area on opening an infected document. Other documents get ... [More]

This virus contains only one macro autoOpen and infects files when MS Word opens them, and copies its macros to Global area (NORMAL.DOT) when MS Word opens an infected document. The virus is not encrypted and may be easily detected by scanning for te... [More]

This virus contains only one macro, but while infecting copies it to two macros in documents and to three macros in NORMAL.DOT:documents:AutoOpen, makemacros NORMAL.DOT: AutoOpen, AutoClose, makemacrosThe virus infects the global macros area (NORMAL.... [More]