Virus.MSWord.Romeo

Technical Details

This macro virus infects MS Word documents and templates when they are created, opened or closed.

The virus itself is a macro. It contains the following text string:

'Anti-Virus for & ROMEO'
'Anti_Virus'

When an infected file or template is opened, the virus disables the ban on executing macros in Word and blocks all attempts to open the built-in Visual Basic editor.

The virus checks for macros containing the string Anti_Virus and if such a macro is not found, it infects documents.