Virus.MSWord.Decept

Technical Details

The virus code contains two macros:

Document:NORMAL.DOT:

———               ———–

haha                    AutoOpen

AutoClose               original

The virus spreads on opening and closing documents.

From 27/08/98 till 03/09/98, after 19:30 the virus replaces every tenth
line with the “Se fodeu. HaHaHaHaHa!!!” text in the current document, then
it displays the message:

Microsoft Word

Acabamos de destruir seu trabalho, espero que voc� tenha perdido

muito tempo com esta bosta de documento.

After that the virus terminates the MS Word.