F-Secure Virus Descriptions : Taguchi

NAME:

Taguchi

WM/Taguchi is a simple Word macro virus that activates when an infected document is closed.

At this point the virus infects the global template and all documents closed thereafter.

VARIANT: Taguchi.A

WM/Taguchi.A activates its payload on February 2nd. Then it inserts the following text to the active document:

     * nEUrOtIc cpU vIrUz *

The text is inserted over and over again until user presses "ESC" to abort.

VARIANT: Taguchi.B

WM/Taguchi.B is functionally identical with WM/Taguchi.A except this variant does not have a payload.

VARIANT: Taguchi.C

WM/Taguchi.C is a corrupted variant of WM/Taguchi.B. When an infected document is closed, the virus causes Word to display the following Visual Basic error message:

    Label not found

[Analysis: Sami Rautiainen, F-Secure]