Class Virus
Platform MSWord

Technical Details

This virus contains eight macros: Fake, Payload, AutoOpen, FileSave,
AutoClose, FilePrint, FileSaveAs, StealthActivate. The virus infects the
global macros area (NORMAL.DOT) on opening or closing an infected document
and writes itself to documents that are saved or saved with new name.

While printing a document the virus:

  • on 29th of any month deletes all words within document and displays the

    Mwahahaha… Bye bye Report…I hope you didnt work on this for too long 🙂

  • in october cancels printing and displays the MessageBox:

    No Printing Today!

Find out the statistics of the threats spreading in your region