The messages that F/WIN produces for the various KNOWN macro viruses appear below. If the infected file has a .DOC file extension, an additional message will be produced that says: - Contains macros but is named .DOC WordMacro.Boom - Contains macros - Contains macros but is named .DOC - System macros: AUTOOPEN, AUTOEXEC, FILESAVEAS - Contains execute-only macros (encrypted macros) - Copy macros into the global template ('CopyMacro') - Uses 'Organize .Copy' to copy macros - Uses the 'FileSaveAs' macro command - Disables NORMAL.DOT write access warnings - Enables the quick save option Seems to be infected with a macro virus! WordMacro.Colors - Contains macros - System macros: AUTOOPEN, AUTOCLOSE, AUTOEXEC, FILEEXIT, FILESAVE, FILESAVEAS, FILENEW, TOOLSMACRO - Contains execute-only macros (encrypted macros) - Copy macros into the global template ('CopyMacro') - Uses macro 'FileSaveAs' - Reenables auto macro processing - Disables NORMAL.DOT write access warnings Seems to be infected with a macro virus! WordMacro.Concept - Contains macros - System macros: AUTOOPEN - Copy macros into the global template ('CopyMacro') - Uses macro 'FileSaveAs' Seems to be infected with a macro virus! WordMacro.DMV - Contains macros - System macros: AUTOCLOSE - Copy macros into the global template ('CopyMacro') - Uses macro 'FileSaveAs' Seems to be infected with a macro virus! Winword.Trojan.FormatC - Contains macros - System macros: AUTOOPEN - Contains execute-only macros (encrypted macros) - Execute other DOS or Windows programs! (Shell) Seems to contain a trojan macro! WordMacro.Hot - Contains macros - System macros: AUTOOPEN - Contains execute-only macros (encrypted macros) - Copy macros into the global template ('CopyMacro') - Uses macro 'FileSaveAs' Seems to be infected with a macro virus! WordMacro.Imposter - Contains macros - System macros: AUTOCLOSE - Copy macros into the global template ('CopyMacro') - Uses macro 'FileSaveAs' Seems to be infected with a macro virus! WordMacro.Nuclear - Contains macros - System macros: AUTOOPEN, AUTOEXEC, FILEEXIT, FILESAVEAS - Contains execute-only macros (encrypted macros) - Copy macros into the global template ('CopyMacro') - Uses macro 'FileSaveAs' - Execute other DOS or Windows programs! (Shell) - Writes into other files directly (Write) - Deletes other files! (Kill) - Disables NORMAL.DOT write access warnings - Changes DOS attributes of other files Seems to be infected with a macro virus! WordMacro.Wazzu - Contains macros - System macros: AUTOOPEN - Copy macros into the global template ('CopyMacro') - Uses the 'FileSaveAs' macro command Seems to be infected with a macro virus! WordMacro.Xenixos - Contains macros - System macros: AUTOOPEN, AUTOEXEC, FILEEXIT, FILESAVE, FILEOPEN, FILESAVEAS, TOOLSMACRO - Contains execute-only macros (encrypted macros) - Copy macros into the global template ('CopyMacro') - Uses macro 'FileSaveAs' - Execute other DOS or Windows programs! (Shell) - Writes into other files directly (Write) - Reenables auto macro processing - Disables NORMAL.DOT write access warnings - Changes DOS attributes of other files Seems to be infected with a macro virus!