Threat Description

Divina

Details

Aliases: Divina
Category: Malware
Type:
Platform: W32

Summary



Divina is a Word macro virus which consists of a single encrypted Autoclose macro. It replicates under any language version of Word. It is related to the WordMacro/Date virus.



Removal



Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details



Divina activates by random on the 21st of May. The it can display dialog boxes with these texts:

    DIVINA IS THE BEST!
      zio Massimo
      Oggi a il compleanno di Divina: devi far festa!
      Non continuare o verra formattato il disco rigido...
      Virus 'DIVINA' in esecuzione
      ROBERTA TI AMO!
      Massimo
      Hard Disk damaged. Start antivirus ?
      Virus 'ROBERTA' is running
      Exit from system and low level format are recommended.
      Virus stopped
      Exit from System ?
      Microsoft Windows

In addition to these messages, the virus just replicates.





Description Created: Mikko Hypponen, F-Secure


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More