NPAD

Like Wazzu the virus consists of a single macro AutoOpen. In win 3.1 the virus adds a variable called `NPad328' to the `Compatibility' section of WIN.INI. This varible is used as a counter; when this counter reaches 23, when document is opened the virus displays the string:

D0EUNPAD94, v.2.21, (c) Maret 1996, Bandung, Indonesia

The virus will not replicate in Ms Word 97.

Copyright 1998, Nikolai Bezroukov. Standard disclaimer applies. As long as this copyright notice is preserved, and any changes are clearly marked as such, the author gives his consent to republish and mirror this text.

Copyright © 1996-2008 by Dr. Nikolai Bezroukov. www.softpanorama.org was created as a service to the UN Sustainable Development Networking Programme (SDNP) in the author free time. Submit comments This document is an industrial compilation designed and created exclusively for educational use and is placed under the copyright of the Open Content License(OPL). Original materials copyright belong to respective owners. Quotes are made for educational purposes only in compliance with the fair use doctrine.

Standard disclaimer: The statements, views and opinions presented on this web page are those of the author and are not endorsed by, nor do they necessarily reflect, the opinions of the author present and former employers, SDNP or any other organization the author may be associated with. We do not warrant the correctness of the information provided or its fitness for any purpose.

Last modified: February 28, 2008