Class Virus
Platform MSWord

Technical Details

This macro-virus contains six macros in one module “Uscan”: AutoOpen,
AutoNew, FileOpen, UScan, intUAppVer, blnUScanSearch.

It infects the global macros area upon opening an infected document
(AutoOpen), and infects other documents upon opening or creating (FileOpen,
AutoNew). While infecting, the virus checks user initials and if they are
“AF”, the virus displays the following message:

This file contains the UScan macro. It is not harmful, but
may spread in a disconcerting manner.

The virus turns off the Word virus protection (the VirusProtection option).

The virus code contains the following comments:

///// /// Name: UScan
//// // Author: tgho
/// // Version: 1.11.3
// Last Edited: 19th February, 1998

Find out the statistics of the threats spreading in your region