| Virus
Name: |
WM.Npad |
| Aliases: |
None known |
| Type: |
MS Word macro virus |
| Resident: |
Yes,
within Word environment |
| Stealth: |
No |
| Trigger: |
A
counter is placed in the WIN.INI file. Whenever a file is opened
within Word, the counter is incremented. When it reaches 23,
the payload is executed and the counter reset to 0. |
| Payload: |
Displays a scrolling message
in Word's status bar reading 'D0EUNPAD94, v.2.21, (c) Maret
1996, Bandung, Indonesia'.
|
| Comments: |
WM.Npad is a normal macro virus.
It infects in the standard way, and is protected by the standard
Word macro 'encryption' system.
|
|
|
