Virus.MSWord.Gavin

Technical Details

This is an encrypted macro virus. It contains only one macro named in
FileSave in NORMAL.DOT and AutoOpen in documents. The virus infects the
global macros area on opening an infected document and infects documents
when they are saved.

On infecting global macros area (NORMAL.DOT) the virus saves current date
in the CONTROL.INI file in [MS-Word] section, line “Compatibility”. In 28
days the virus inserts the auto-correction: “Microsoft” -> “Microbollocks”.

The virus contains the comments:

Gavin’s Word Virus V2.0 – 1996

Platform Independant

*** NOT FOR RELEASE ***

In emergency contact gr.brock@ic.ac.uk