Virus.MSWord.Talon.b

tag:Macro   Viruses  

0 0

This macro-virus contains five original macros that are copied with six different names while infecting the system and documents. All macros except the Info macro are encrypted.

Documents   NORMAL.DOT
Macro1: FSAB        FileSaveAs
FSAB
Macro2: AOB         AOB
AutoOpen
Macro3: ToolsMacro  ToolsMacro
Macro4: Info        Info
Macro5: Password

The virus infects the global macros area upon opening an infected document (AutoOpen), and writes itself to files that are saved with new name (FileSaveAs).

Upon entering the Tools/Macro menu (ToolsMacro), the virus displays the following MessageBox:

Warning
This Option Is Not Available, Please Insert The MS-Office CD
And Install The Help Files To Continue.

On the 27th of any month, the virus sets the password "talon" for documents and displays the Message Boxes:

Warning
Your document Has Just been Been Saved, I Hope You Know The Password!!!",
Brought To You By Talon 1997"

The Info macro contains the comments:

*********************************************
Talon #1
June 18 Payload Activates
Displays Message
All Files Encrypted Except Info File
Brought To You By
"Talon"
*********************************************

©Virus-Encyclopedia.com All Rights Reserved.