Virus.MSWord.K302

Technical Details

This is polymorphic macro virus, it contains three macro: AutoOpen, body,
m. It replicates on opening documents (AutoOpen). The virus does not
manifest itself in any way. It contains the commented string: “k302”.

The virus has unusual structure: the text of main infection routine in the
virus code is commented. In case of need the virus creates a temporary
macro, copies this text to there, removes comments, executed and deletes.