Virus.MSWord.Cipher or Cipher is a virus that runs on Microsoft Word.


Cipher contains seven macros in one module "Cipher": AutoNew, AutoOpen, AutoClose, cphrdoc, hideb, WindowsDirectory and spreadIB. It replicates upon document creating, opening and closing (AutoNew, AutoOpen, AutoClose).

Depending on the system random counter, the virus sets the password "MisterCipher" on a current document or displays the following MessageBox:

 Time Signal

 I say to you that it's 

 It's too late. You must finish to work before next time!!!


On Friday the 17th, the 25th of April[1], or on the 31st of January, March, May, July, August, October and December, the virus drops a file infected by the "Italian.578" DOS virus.

Upon closing documents on the 25th of April, or depending on the system random counter, the virus encrypts the text in the current document and displays the following MessageBox:

 I want to say to you: L'Italia è una ed indivisibile e c'è la morte per

 chi la divide!!!!!.....[2]

 Are you angry because you lost your document?¿; Kill Bossi, the fault is his [sic]

 Mister Cipher reigning



Virus.MSWord.Cipher by Alles

Virus.MSWord.Cipher by Alles


Virus.MSWord.Cipher by danooct1

Virus.MSWord.Cipher by danooct1


  1. Possible reference to the Italian Liberation Day.
  2. Italian for "Italy is one and indivisible and death to whoever divides it!"

Ad blocker interference detected!

Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.