Class Virus
Platform MSWord

Technical Details

This is an encrypted macro virus. It contains only one macro named in
FileSave in NORMAL.DOT and AutoOpen in documents. The virus infects the
global macros area on opening an infected document and infects documents
when they are saved.

On infecting global macros area (NORMAL.DOT) the virus saves current date
in the CONTROL.INI file in [MS-Word] section, line “Compatibility”. In 28
days the virus inserts the auto-correction: “Microsoft” -> “Microbollocks”.

The virus contains the comments:

Gavin’s Word Virus V2.0 – 1996
Platform Independant
In emergency contact

Find out the statistics of the threats spreading in your region