Virus.MSWord.Surabaya

0 0

This macro virus contains six macros: AutoOpen, FileSaveAs, Autoexec, ToolsMacro, FileTemplates, Plong. It infects the global macros area on opening an infected document (AutoOpen) and writes itself to documents that are saved with new name (FileSaveAs).

While installing into the system the virus creates new profile section (the WIN.INI file):

[Author]
Name=TeBeYe`93 The ICE-Man"

When already infected Word is started (AutoExec), the virus prints to the status line the text:

Lontong Micro Device (c) 1993 By ICE-Man

Macro Plong contains the remarked text:

This Macro was created by : The ICE - "Yes"  Man
Allah Swt always be with All of You ....
Surabaya, 09-09-1996

On entering File/Templates and Tools/Macro menus the virus displays the MessageBox:

Sorry...