Virus.MSWord.Bismark1 or Bismark1, or sometimes called Bismark, is a destructive macro virus for Microsoft Word on Microsoft Windows.


The virus contains 7 macros:

  • AutoOpen
  • BisMark
  • ToolsMacro
  • ToolsCustomize
  • ViewVBcode
  • FileSave
  • FileClose

The virus infects upon the opening or saving of documents (AutoOpen, FileClose). Upon opening a file, the virus turns off the VirusProtection options.

Payload Edit

Upon saving a document, the virus erases files belonging to well known anti-viruses:

c:\program files\norton antivirus\Virscan2.dat
c:\program files\antiviral toolkit pro\*.*

Upon entering the menu item Tools/Macro, the virus installs the password "Bismark" on the document, and outputs the Balloon:

Word Macro Virus BisMark1
You Should Have Left Me Alone, I Was Not Hurting Anything. Now I'am Mad!

After this, the virus shuts down Windows. On Friday at 12:00, the virus inserts the autocorrect entries "the" on value "Word Macro Virus BisMark1, Written By Talon".




Bismark macro virus review by danooct1

Ad blocker interference detected!

Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.