Class Virus
Platform MSWord

Technical Details

This is an encrypted Word macro virus. It contains 5 macros in documents
and 10 in NORMAL.DOT:

Documents NORMAL.DOT
LPT1 FileOpen, LPT1
LPT2 FilePrint, LPT2
Canon FileSaveAs, Canon
Epson Epson, FileTemplates, ToolsMacro
AutoOpen AutoOpen

The virus infects the global macros area (NORMAL.DOT) on opening an
infected document (AutoOpen) and writes itself to documents that are saved
with new name (FileSaveAs).

On entering the Tools/Macro the virus displays the MessageBox:

Weeee Weeee

On printing documents the virus writes to the status line the message and
draws it to right:

Know what Dwira Oktorianto is, before it is too late

Find out the statistics of the threats spreading in your region