Nometz.b

Nometz.b is a macro virus that infects all opened Microsoft Word documents. The spyware modifies Microsoft Word essential macro security settings, hides certain menu options and disables some application components. Nometz.b searches infected documents for certain strings and, if any of them are found, copies files to C:WindowsSystem directory and changes their extension to .jpg. Then it silently uploads these files to a predetermined FTP server. Such virus behavior causes a disclosure of user confidential information. After documents were successfully uploaded, Nometz.b removes all the .jpg images in C:WindowsSystem directory and temporarily restores default Microsoft Word security features.