Description |
Technical Details
This is polymorphic macro virus, it contains three macro: AutoOpen, body,
m. It replicates on opening documents (AutoOpen). The virus does not
manifest itself in any way. It contains the commented string: “k302”.
The virus has unusual structure: the text of main infection routine in the
virus code is commented. In case of need the virus creates a temporary
macro, copies this text to there, removes comments, executed and deletes.
|