Class Virus
Platform MSWord

Technical Details

This is a stealth macro-virus. It contains six functions: AutoOpen,
AutoClose, ToolsMacro, Toolscustomize, ViewVBcode, and OPIM. Upon opening a
document, the virus disables the VirusProtection function. The virus
replicates itself upon opening and closing documents (AutoOpen, AutoClose).

Upon entering the Tools/Macro menu, the virus sets the password “OPIM” for
the current document and exits Windows. On Mondays, it replaces “the” with
the “thee” string in the current document.