Virus.MSWord.Hassle

Class Virus
Platform MSWord
Description

Technical Details


This is a encrypted virus containing 7 macros:


NORMAL.DOT Infected files
AutoExec AutoClose
FileSaveAs ToolsMacro
ToolsMacro Microsoft01
Microsoft05 Microsoft02
Microsoft04 Microsoft03
Microsoft02 Microsoft04
Microsoft01 Microsoft05

It seems that the virus author used Microsoft ScanProt anti-virus macro scanner
as a original code, and converted that utility to the “Hassle” virus. It was
named after its internal variable Hassle.


This virus disables Tools/Macro menu – on accessing items of that menu, the
virus displays the message box:


Windows Application Error
Out of Memory or System Resources

While infecting a system (on AutoClose) the virus with a probability of 1/20
displays:

Are you sure you wish to Quit