Class Virus
Platform MSWord

Technical Details

This is a Word97 macro virus, it contains one macro: AutoOpen. It is
a “non-memory resident” virus – on opening an infected file, it searches for
non-infected documents in directories (from current to root) and infects
them. To detect already infected documents, the virus writes its ID-stamp to
a not used field in the document’s header.

Depending on the system random counter, the virus displays the MessageBoxes:

bwahah !!!
RatSMagic by Reptile

Find out the statistics of the threats spreading in your region