Virus.MSWord.Talon.a

tag:Macro   Viruses  

0 0

This macro-virus contains five original macros that are copied with six different names while infecting the system and documents. All macros except the Info macro are encrypted.

Documents   NORMAL.DOT
Macro1: FSAB        FileSaveAs
FSAB
Macro2: AOB         AOB
AutoOpen
Macro3: ToolsMacro  ToolsMacro
Macro4: Info        Info
Macro5: Deed

The virus infects the global macros area upon opening an infected document (AutoOpen), and writes itself to files that are saved with new name (FileSaveAs).

Upon entering the Tools/Macro menu (ToolsMacro), the virus displays the following MessageBox:

Warning
This Option Is Not Available, Please Insert The MS-Office CD
And Install The Help Files To Continue.

On June 18th, the virus displays the Message Boxes:

Your System Is Infected With The Macro Virus Talon #1!
This Macro Virus Was Brought To You By: TALON 1997

The Info macro contains the comments:

*********************************************
Talon #1
June 18 Payload Activates
Displays Message
All Files Encrypted Except Info File
Brought To You By
"Talon"
*********************************************

©Virus-Encyclopedia.com All Rights Reserved.