The virus infects the global macros area on opening an infected document
(AutoOpen). It writes itself to documents that are saved (FileSave) and
saved with new name (FileSaveAs). On each opening an infected document the
virus increases its counter (that is saved in WINWORD6.INI file). When that
counter reaches 100, the virus erased the C:COMMAND.COM file.