Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||On the August 31, it replaces the text in the active document, modifies the top left corner of the status bar and changes the document properties. It disables the Word macro antivirus protection.|
|Detection updated on:||Nov. 13, 2002|
Bleck.A is a macro virus that goes into action on the August 31. Its payload consits of replacing the text in the active document with another one, and writing Birthday ko dd/mm/yy file_name in the top left corner of the status bar.
Like most macro viruses, it reaches computers in an infected Word document, with a DOC extension. This document then infects the global template (NORMAL.DOT file) and spreads its infection to all the Word documents generated with it.
It disables the Word macro antivirus protection, preventing the user from disabling macros when opening an infected document.
The only indications that Bleck.A has reached your computer are the following changes to the Word document that is open on August 31:
- The original content of the document is replaced. The new text starts with the following introduction: A CURSE FROM BLACKROSE TO SOMEONE HE HATES.
- The virus modifies the status bar by writing Birthday ko followed by the system date and document name in the top left corner.
- It changes the properties of the document.