Virus.MSWord.Uscan

Technical Details

This macro-virus contains six macros in one module “Uscan”: AutoOpen,
AutoNew, FileOpen, UScan, intUAppVer, blnUScanSearch.

It infects the global macros area upon opening an infected document
(AutoOpen), and infects other documents upon opening or creating (FileOpen,
AutoNew). While infecting, the virus checks user initials and if they are
“AF”, the virus displays the following message:

This file contains the UScan macro. It is not harmful, but

may spread in a disconcerting manner.

The virus turns off the Word virus protection (the VirusProtection option).

The virus code contains the following comments:

///// /// Name: UScan

//// // Author: tgho

/// // Version: 1.11.3

// Last Edited: 19th February, 1998