Macro Virus Table - Defense Technical Information Center

MACRO
Macro Viruses
Name: WM.NOP.B:De
Aliases: WM.NOP.B:De, NOP.B Type: Macro.
Disk Location: Word template files. Features: No damage, only replicates.
Damage: No damage, only Size: Adds Macros to Word See Also: WM.NOP.A
replicates.
document/template files
Notes: This is a Word macro virus.
Macros installed:
NOP
DateiSpeichern
Name: WM.Npad.A
Aliases: WM.Npad.A, Npad Type: Macro.
Disk Location: Word template files. Features: No damage, only replicates.
Damage: No damage, only
replicates.
Size: Adds Macros to Word
document/template files
See Also: WM.Npad.B,
WM.Npad.C, WM.Npad.D,
WM.Npad.E
Notes: This is a Word macro virus.
Does not spread in the Macintosh.
It triggers when a counter stored in Win.ini is decremented to 0 from 23 and then displays the
following text in the status bar at the bottom of the word screen: "D0EUNPAD94, v. 2.21, (c)
Maret 1996, Bandung, Indonesia". The text bounces from side to side in the status bar.
The counter is: NPad328 in the [Compatibility] section of Win.ini
Under Word 8 on NT4, the AutoExecute macro does not appear in the Organizer window or the
macro window.
Macros installed:
AutoOpen
See the Virus Bulletin 11/96 for an analysis.
Name: WM.Npad.B
Aliases: WM.Npad.B, Npad.B Type: Macro.
Disk Location: Word template files. Features: No damage, only replicates.
Damage: No damage, only
replicates.
Notes: This is a Word macro virus.
Does not spread in the Macintosh.
Macros installed:
AutoOpen
Size: Adds Macros to Word
document/template files
See Also: WM.Npad.A,
WM.Npad.C, WM.Npad.D,
WM.Npad.E
Name: WM.Npad.C
Aliases: WM.Npad.C, Npad.C Type: Macro.
Disk Location: Word template files. Features: No damage, only replicates.
40 CIAC Computer Virus Information Update May 21, 1998