Divina is a Word macro virus which consists of a single encrypted Autoclose macro. It replicates under any language version of Word. It is related to the WordMacro/Date virus.
Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.
Detailed instructions for F-Secure security products are available in the documentation found in the Downloads section of our Home - Global site.
You may also refer to the Knowledge Base on the F-Secure Community site for further assistance.
Divina activates by random on the 21st of May. The it can display dialog boxes with these texts:
DIVINA IS THE BEST! zio Massimo Oggi a il compleanno di Divina: devi far festa! Non continuare o verra formattato il disco rigido... Virus 'DIVINA' in esecuzione ROBERTA TI AMO! Massimo Hard Disk damaged. Start antivirus ? Virus 'ROBERTA' is running Exit from system and low level format are recommended. Virus stopped Exit from System ? Microsoft Windows
In addition to these messages, the virus just replicates.
Description Details: Mikko Hypponen, F-Secure