Virus.MSWord.Ordo

Technical Details

This is a Word macro virus – it contains two macros: AutoOpen, ORDO. It
replicates itself on closing a document. The virus does not install itself
into the global macros area – to infect other documents the virus opens the
recently used file list and infects the documents that are listed in there.

On July 2nd the virus registers in the system the screen-saver
SYSTEMMARQUEE.SCR, but does not create this file.