Virus.MSWord.Safwan

Class Virus
Platform MSWord
Description

Technical Details


This virus contains two macros in NORMAL.DOT: FileOpen, System32. In
documents it contains one macro AutoOpen. It infects the global macros area
and documents on opening (AutoOpen, FileOpen). AutoOpen in NORMAL.DOT has
the name System32.


On October 10 it displays the MessageBox:


Happy Birthday
Is it your birthday today?