FANDOM


SweetKiller is a macro virus on Microsoft Word with Microsoft Windows.

Behavior

When the virus is run, it will install its macros and infect every document that is opened.

Payload

When an infected document is run on December 6th of any year, it displays a message for a split second before rebooting the computer. It adds the "NoDesktop" and "NoDrives" to the registry so when the computer reboots, no desktop is seen. When the user examines explorer.exe, it has removed all drives.

The message is unreadable as the message is formatted in Windows-1252, causing the message to be unreadable. The message is supposed to be in Chinese and is translated to:

Microsoft products have a lot of vulnerabilities, Don't use Microsoft products from now on.


Videos

Virus.MSWord04:39

Virus.MSWord.SweetKiller

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.