Home Malware Programs Viruses Nometz

Nometz

Posted: March 28, 2006

Nometz is a macro virus that infects all opened Microsoft Word documents. The spyware modifies Microsoft Word essential macro security settings, hides certain menu options and disables some application components. Nometz copies infected documents to C:WindowsSystem directory, changes their extension to .jpg and silently uploads these files to a predetermined FTP server. Such virus behavior causes a disclosure of user sensitive information. After documents were successfully uploaded, the spyware removes them and temporarily restores default Microsoft Word security settings.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 cdrom.dot
    2 cdrom1.bat

Related Posts

Loading...