Virus.MSWord.Hikmat
| Alert Level : | High |
| Discovered: | Mar 07 2000 |
| Tag: | Macro Viruses |
| Discoverer and Source: | http://www.kaspersky.com/ |
Malware Behavior and Technical Description
This is an encrypted macro virus. It contains two original macros that have different names in infected documents and NORMAL.DOT:
Documents NORMAL.DOT AutoOpen FileSave FileSaveAs FileSaveAsThe virus infects the system and documents on opening and saving files. It creates a new variable in infected documents:
Dzutaqshiri = (c)Hikmat Sudrajat, Bandung, April 1996In some cases (on error while infecting a document?) it prints the message to the status line:
This command is not available because a document window is not active
0
Removal Virus.MSWord.Hikmat instructions:
0
Need help? Live computer support via remote at SupportSpace |

