0 0
This macro-virus contains five original macros that are copied with six different names while infecting the system and documents. All macros except the Info macro are encrypted.
Documents NORMAL.DOT Macro1: FSAB FileSaveAs FSAB Macro2: AOB AOB AutoOpen Macro3: ToolsMacro ToolsMacro Macro4: Info Info Macro5: Password
The virus infects the global macros area upon opening an infected document (AutoOpen), and writes itself to files that are saved with new name (FileSaveAs).
Upon entering the Tools/Macro menu (ToolsMacro), the virus displays the following MessageBox:
Warning This Option Is Not Available, Please Insert The MS-Office CD And Install The Help Files To Continue.
On the 27th of any month, the virus sets the password "talon" for documents and displays the Message Boxes:
Warning Your document Has Just been Been Saved, I Hope You Know The Password!!!", Brought To You By Talon 1997"
The Info macro contains the comments:
********************************************* Talon #1 June 18 Payload Activates Displays Message All Files Encrypted Except Info File Brought To You By "Talon" *********************************************

Subscribe
Hot Articles