Macro Virus Table - Defense Technical Information Center

MACRO
Macro Viruses
Damage: No damage, only Size: Adds Macros to Word
replicates.
document/template files
Notes: This is a Word macro virus.
It does not spread on the Macintosh
Installed macros:
AutoClose
See Also: WM.Divina.B,
WM.Divina.C
Name: WM.Divina.B
Aliases: WM.Divina.B, Divina.B Type: Macro.
Disk Location: Word template files. Features: No damage, only replicates.
Damage: No damage, only Size: Adds Macros to Word See Also: WM.Divina.A,
replicates.
document/template files WM.Divina.C
Notes: This is a Word macro virus.
It does not spread on the Macintosh
Installed macros:
AutoClose
Name: WM.Divina.C
Aliases: WM.Divina.C, Divina.C Type: Macro.
Disk Location: Word template files. Features: No damage, only replicates.
Damage: No damage, only Size: Adds Macros to Word See Also: WM.Divina.A,
replicates.
document/template files WM.Divina.C
Notes: This is a Word macro virus.
It does not spread on the Macintosh
Installed macros:
AutoClose
Name: WM.DMV.A
Aliases: WM.DMV.A, DMV.A, DMV , Winword DMV Type: Macro.
Disk Location: Word template files. Features: No damage, only replicates.
Damage: No damage, only Size: Adds Macros to Word See Also: XM.DMV
replicates.
document/template files
Notes: Demonstration Macro Virus.
This virus uses the macro capability built into Microsoft Word (WordBasic) to add a virus to a
Word document. Since this virus is written in the macro language, it is not platform specific, but
will execute on any platform that runs Word 6 or later.
When you open an infected document, its auto open macro runs and installs an AutoClose macro
in your global macro file (normal.dot). Once that is done, the virus code is executed every time
you close a document. The virus code then writes copies of itself onto every document you save
with Word.
F-Prot 2.21 Detects it.
28 CIAC Computer Virus Information Update May 21, 1998