Threat Description

Divina

Details

Aliases:Divina
Category: Malware
Type:
Platform: W32

Summary



Divina is a Word macro virus which consists of a single encrypted Autoclose macro. It replicates under any language version of Word. It is related to the WordMacro/Date virus.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

You may wish to refer to the Support Community for further assistance. You also may also refer to General Removal Instructions for a general guide on alternative disinfection actions.



Technical Details



Divina activates by random on the 21st of May. The it can display dialog boxes with these texts:

 DIVINA IS THE BEST!
zio Massimo
Oggi a il compleanno di Divina: devi far festa!
Non continuare o verra formattato il disco rigido...
Virus 'DIVINA' in esecuzione
ROBERTA TI AMO!
Massimo
Hard Disk damaged. Start antivirus ?
Virus 'ROBERTA' is running
Exit from system and low level format are recommended.
Virus stopped
Exit from System ?
Microsoft Windows

In addition to these messages, the virus just replicates.





Description Created: Mikko Hypponen, F-Secure


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More