Virus.MSWord.Lunar

tag:Macro Viruses

0 0

This is an encrypted macro virus. It contains seven macros: autoexec, autoopen, filesave, autoclose, filesaveas, toolsmacro, filetemplates.

The virus infects the global macros area on opening (AutoOpen) or closing (AutoClose) an infected document. It infects the documents that are saved (FileSave) or saved with new name (FileSaveAs).

The virus creates the LUNAR.INI file and writes the text to there:

[virus]
lunar=<number of generation>
author=Hyperlock

This is a stealth-virus - it hooks File/Templates and Tools/Macro, on entering these menus the virus displays the MessageBox:

Microsoft Word
Not enough memory to perform this operation

The virus contains the commented text strings:

WM.Lunar virus
AutoExec macro

previous:Virus.MSWord.Lucifer
previous:Virus.MSWord.Lupita

Virus Source from:

New articles

RedCrossAntivirusRedCrossAntivirus carries out the following actions: When it is run, it connects to the website http://85.231.174/inst.php?id=and the program st...Virus.MSWord.HassleThis is a encrypted virus containing 7 macros:NORMAL.DOTInfected files AutoExecAutoClose FileSaveAsToolsMacro ToolsMacroMicrosoft01 Microsoft05Microsoft02 Micro...Virus.MSWord.HilightThis is an encrypted macro virus. It contains two macros that have different names in documents and NORMAL.DOT:DocumentsNORMAL.DOT AutoOpenAutoExec PrezentItFil...Virus.MSWord.HeaderThis virus contains 3 macros:DocumentsNORMAL.DOT AutoOpenao fsFileSave fsaFileSaveAsThe virus infects the system area on opening an infected document (AutoOpen)...Virus.MSWord.HiacThis macro virus does not manifest itself in any way. It contain two macros in infected documents and NORMAL.DOT:DocumentsNORMAL.DOT ------------------- AutoClo...

Hot Articles

Virus.MSWord.Lunar

Computer Virus Clounds