Virus.MSWord.Coe

Class Virus
Platform MSWord
Description

Technical Details


This macro virus contains three macros with random selected names – while
infecting the virus selects three random names and copies current macros
with these new names. To get these names on next infection the virus saves
them in internal document’s variables or in Windows WIN.INI file in section
[Intl] in stings: “Info1=”, “Info2=”, “Info3=”.


The virus does not contain any auto-name, so it cannot replicate itself in
most of the cases. It replicates only if random selected name is the name of
some auto-function (the probability is very closed to zero), or if some
virus macro is executed by user (Tools/Macro/Run).