Virus.MSWord.Cipher or Cipher is a virus that runs on Microsoft Word.


Cipher contains seven macros in one module "Cipher": AutoNew, AutoOpen, AutoClose, cphrdoc, hideb, WindowsDirectory and spreadIB. It replicates upon document creating, opening and closing (AutoNew, AutoOpen, AutoClose).

Depending on the system random counter, the virus sets the password "MisterCipher" on a current document or displays the following MessageBox:

 Time Signal

 I say to you that it's 

 It's too late. You must finish to work before next time!!!


On Friday the 17th, the 25th of April, or on the 31st of January, March, May, July, August, October and December, the virus drops a file infected by the Italian.578 DOS virus.

Upon closing documents on the 25th of April, or depending on the system random counter, the virus encrypts the text in the current document and displays the following MessageBox:

 I want to say to you: L'Italia è una ed indivisibile e c'è la morte per

 chi la divide!!!!!.....

 Are you angry because you lost your document?¿; Kill Bossi, the fault is his [sic]

 Mister Cipher reigning



Virus.MSWord.Cipher by Alles

Virus.MSWord.Cipher by Alles


Virus.MSWord.Cipher by danooct1

Virus.MSWord.Cipher by danooct1