Techguy
December 12, 2000, 06:43 pm
W97M_CHINGDA.TRJ
Risk rating: low
Virus type: Macro
Destructive: N
Aliases:
CHINGDA.TRJ
Description:
This virus is activated when opening and closing documents. It alters the contents of the active document and loses its original form.
In the wild: No
Trigger condition 1: Day is between December 2 and December 31
Payload 1: Others (replaces text in active document)
Detected by pattern file#: 813
Detected by scan engine#: 5.170
Language:
English
Platform: Windows
Encrypted: No
Size of virus: 848 Bytes
Details:
This virus is activated when an infected document is opened or closed. Upon execution, this virus alters the contents of the active document, such that they are unrecoverable.
When a document is opened, the MACRO option under the TOOLS menu is disabled. This prevents users from invoking the Visual Basic Editor, making the malicious module inaccessible.
If the current system date is between December 2 and December 31, the virus deletes the contents of the active document and replaces it with the following text:
English Translation: Now if already I load the chingada one to youIf to the IVA in Foods and Medicines
------------------
Thank you for using Help From Techs Support Forums!
Please come again and remember to refer a friend to our site.
Risk rating: low
Virus type: Macro
Destructive: N
Aliases:
CHINGDA.TRJ
Description:
This virus is activated when opening and closing documents. It alters the contents of the active document and loses its original form.
In the wild: No
Trigger condition 1: Day is between December 2 and December 31
Payload 1: Others (replaces text in active document)
Detected by pattern file#: 813
Detected by scan engine#: 5.170
Language:
English
Platform: Windows
Encrypted: No
Size of virus: 848 Bytes
Details:
This virus is activated when an infected document is opened or closed. Upon execution, this virus alters the contents of the active document, such that they are unrecoverable.
When a document is opened, the MACRO option under the TOOLS menu is disabled. This prevents users from invoking the Visual Basic Editor, making the malicious module inaccessible.
If the current system date is between December 2 and December 31, the virus deletes the contents of the active document and replaces it with the following text:
English Translation: Now if already I load the chingada one to youIf to the IVA in Foods and Medicines
------------------
Thank you for using Help From Techs Support Forums!
Please come again and remember to refer a friend to our site.