Virus.MSWord.Hikmat

Class Virus
Platform MSWord
Description

Technical Details


This is an encrypted macro virus. It contains two original macros that have
different names in infected documents and NORMAL.DOT:


Documents NORMAL.DOT
AutoOpen FileSave
FileSaveAs FileSaveAs

The virus infects the system and documents on opening and saving files. It
creates a new variable in infected documents:

Dzutaqshiri = (c)Hikmat Sudrajat, Bandung, April 1996

In some cases (on error while infecting a document?) it prints the message
to the status line:

This command is not available because a document window is not active