Macro Virus Table - Defense Technical Information Center

MACRO
AutoOpen
DropSuriv
FileExit
FilePrint
FilePrintDefault
FileSaveAs
InsertPayload
Payload
Macro Viruses
You can also detect the virus when printing a document during the last 5 seconds of any minute.
If you do, the following text appears at the top of the printed page.
"And finally I would like to say:"
"STOP ALL FRENCH NUCLEAR TESTING IN THE PACIFIC!"
On April 5, Nuclear attempts to delete system files.
Removal: Mac: SAM 4.0.8 finds and removes this virus.
PC: F-PROT 2.20 detects
Name: WM.Nuclear.B
Aliases: WM.Nuclear.B, Nuclear.B Type: Macro.
Disk Location: Word template files. Features: Deletes or moves files.
Damage: Deletes or moves
files.
Notes: See WM.Nuclear.A
Macros installed:
Contains 7 macros.
Size: Adds Macros to Word
document/template files
Name: WM.Nuclear.C
Aliases: WM.Nuclear.C, Nuclear.C Type: Macro.
See Also: WM.Nuclear.A,
WM.Nuclear.C,
WM.Nuclear.E
Disk Location: Word template files. Features: Deletes or moves files.
Damage: Deletes or moves
files.
Notes: See WM.Nuclear.A
Macros installed:
AutoExec
DropSuriv
FileExit
FilePrint
FilePrintDefault
Size: Adds Macros to Word
document/template files
See Also: WM.Nuclear.A,
WM.Nuclear.B,
WM.Nuclear.E
42 CIAC Computer Virus Information Update May 21, 1998