Class Virus
Platform MSWord

Technical Details

This macro virus contains four macros in documents and five in NORMAL.DOT:

Documents NORMAL.DOT
autoopents ILMD
dateispeichernunterV DateiSpeichern, DateiSpeichernUnter
dateidruckenstandardV DateiDruckenStandard
dateidruckenV DateiDrucken

The virus infects the global macros area on opening documents. It infects
documents on saving and saving with new name.

On printing documents the virus replaces the “s” symbols with “t”. The
virus contains the comments:

* ILMD V1.0 *
* *
* Written in November 1997 somewhere in Germany by Thebman *
* *
* Congratulations for decoding this file *

Find out the statistics of the threats spreading in your region