Virus.MSWord.Gavin

Class Virus
Platform MSWord
Description

Technical Details


This is an encrypted macro virus. It contains only one macro named in
FileSave in NORMAL.DOT and AutoOpen in documents. The virus infects the
global macros area on opening an infected document and infects documents
when they are saved.


On infecting global macros area (NORMAL.DOT) the virus saves current date
in the CONTROL.INI file in [MS-Word] section, line “Compatibility”. In 28
days the virus inserts the auto-correction: “Microsoft” -> “Microbollocks”.


The virus contains the comments:


Gavin’s Word Virus V2.0 – 1996
Platform Independant
*** NOT FOR RELEASE ***
In emergency contact gr.brock@ic.ac.uk