%%File: VIRS0859.TXT
%%Name/Aliases: WordMacro.Nuclear
%%Platform: Win, Win NT, Mac
%%Type: Macro., 
%%Disk Location: WinWord documents
%%Features: Direct acting.
%%Damage: Attempts to launch a program virus, Corrupts printed 
documents.
%%Size: Adds macros to a document.
%%See Also: WordMacro.Nuclear, Concept, FormatC , Colors, DMV, Hot, 
Imposter, Irish, Infezione, Wazzu, Atom, Xenixos, Polite, Boom, 
Friendly, NOP, Pheew, Lbynj
%%Notes: The WordMacro.Nuclear virus is similar in operation to the 
WinWord.Concept virus in how it infects files, but contains an 
additional payload. This virus contains a dropper for a DOS virus, as 
well as the document infector. 
You can detect the virus by listing the macros installed in Word, using 
the Tools Macros command. In the Macro dialog box that appears, make 
sure that the Macros Available In: box is set to: All Active Templates. 
If all the macros in the following list are listed in the Macro Name 
list, you probably have the virus. If only some are there, you probably 
don't.

AutoExec
AutoOpen
DropSuriv
FileExit
FilePrint
FilePrintDefault
FileSaveAs
InsertPayload
Payload

You can also detect the virus when printing a document during the last 5 
seconds of any minute. If you do, the following text appears at the top 
of the printed page.

"And finally I would like to say:"

"STOP ALL FRENCH NUCLEAR TESTING IN THE PACIFIC!"



Removal: Mac: SAM 4.0.8 finds and removes this virus.
PC: F-PROT 2.20 detects