Virus.MSWord.Hikmat

0 0

This is an encrypted macro virus. It contains two original macros that have different names in infected documents and NORMAL.DOT:

Documents   NORMAL.DOT
AutoOpen    FileSave
FileSaveAs  FileSaveAs

The virus infects the system and documents on opening and saving files. It creates a new variable in infected documents:

Dzutaqshiri = (c)Hikmat Sudrajat, Bandung, April 1996

In some cases (on error while infecting a document?) it prints the message to the status line:

This command is not available because a document window is not active