Kaspersky Threats

Class

Platform

Description

Technical Details

This virus contains 3 macros:



Documents   NORMAL.DOT

AutoOpen    ao

fs          FileSave

fsa         FileSaveAs

The virus infects the system area on opening an infected document
(AutoOpen). It infects documents that are saved (FileSave) or saved with
new name (FileSaveAs). The virus checks its presence by using document’s
Header, in which it writes the text:



Your document was infected by a very dangerous virus!

Class	Virus
Platform	MSWord
Description	Technical Details This virus contains 3 macros: Documents NORMAL.DOT AutoOpen ao fs FileSave fsa FileSaveAs The virus infects the system area on opening an infected document (AutoOpen). It infects documents that are saved (FileSave) or saved with new name (FileSaveAs). The virus checks its presence by using document’s Header, in which it writes the text: Your document was infected by a very dangerous virus!

Virus.MSWord.Header

Technical Details