Class Virus
Platform MSWord

Technical Details

This virus spreads itself on documents opening and closing. On opening a
document the virus checks the system date. If day number is less than 3,
the virus hides mouse cursor and displays the message:

Created By Yusril Ihza Mahendra

Another virus routine deletes all libraries (.DLL) files from Windows
system folder if day number is greater than 25. This routine is executed on
document opening, calling Visual Basic Editor and clicking “Tools/Macro”

The virus body contains the text strings:

Macros Pbb mungkin tidak bisa Anda hapus, Anda hanya bisa menghapus makro
buatan Anda (Descr: ‘Makro non-Pbb’)
Terimakasih Anda Telah
Memproteksi Word dengan Aman

Find out the statistics of the threats spreading in your region