Virus.MSWord.Smmd

Technical Details

The virus contains one macro that is names AutoOpen in documents and
FileSaveAs in NORMAL.DOT. It infect the global macros area (NORMAL.DOT) on
opening an infected document (AutoOpen) and writes itself to documents that
are saved with new name (FileSaveAs). While infecting the virus slightly
modifies its code: it inserts into its source WordBasic code empty lines.

The virus contains the comments:

**********************************************************

WARNING: This is trivial example of Self Modifying Macro !

Only for evaluation purposes !

It is strongly prohibited to spread this macro !

The name for this shit must be “SMM_demo”

Do not use other name please !

———————————————————-

Name for this shit: “SMM_demo” research macro

Author: Unknown

date: Unknown

origin: Unknown

**********************************************************