Class Virus
Platform MSWord

Technical Details

This virus contains four macros:

NORMAL.DOT Infected files
HaHa HaHa
FileSaveAs FileSort
FileSort AutoOpen
EditSize EditSize

The virus infects the system on opening an infected file (AutoOpen) and
infects the files that are saved (FileSaveAs).

Macro “HaHa” is virus-ID macro, it is commented by string:

Wondering how to fix your program?

and contains the remark:

REM Sure Hate it for ya!!

The virus deletes all texts within document, inserts the strings:

i said:
say goodbye to all your stuff
(look at that hard drive spin!)

and then saves the document 100 times on disk.

Find out the statistics of the threats spreading in your region