Kaspersky Threats

Class

Platform

Description

Technical Details

This virus contains four macros:



NORMAL.DOT    Infected files

HaHa          HaHa

FileSaveAs    FileSort

FileSort      AutoOpen

EditSize      EditSize

The virus infects the system on opening an infected file (AutoOpen) and
infects the files that are saved (FileSaveAs).

Macro “HaHa” is virus-ID macro, it is commented by string:



Wondering how to fix your program?

and contains the remark:



REM  Sure Hate it for ya!!

The virus deletes all texts within document, inserts the strings:



i said:

say goodbye to all your stuff

(look at that hard drive spin!)

and then saves the document 100 times on disk.

Class	Virus
Platform	MSWord
Description	Technical Details This virus contains four macros: NORMAL.DOT Infected files HaHa HaHa FileSaveAs FileSort FileSort AutoOpen EditSize EditSize The virus infects the system on opening an infected file (AutoOpen) and infects the files that are saved (FileSaveAs). Macro “HaHa” is virus-ID macro, it is commented by string: Wondering how to fix your program? and contains the remark: REM Sure Hate it for ya!! The virus deletes all texts within document, inserts the strings: i said: say goodbye to all your stuff (look at that hard drive spin!) and then saves the document 100 times on disk.