Virus.MSWord.Hassle

0 0

This is a encrypted virus containing 7 macros:

NORMAL.DOT    Infected files
AutoExec      AutoClose
FileSaveAs    ToolsMacro
ToolsMacro    Microsoft01
Microsoft05   Microsoft02
Microsoft04   Microsoft03
Microsoft02   Microsoft04
Microsoft01   Microsoft05

It seems that the virus author used Microsoft ScanProt anti-virus macro scanner as a original code, and converted that utility to the "Hassle" virus. It was named after its internal variable Hassle.

This virus disables Tools/Macro menu - on accessing items of that menu, the virus displays the message box:

Windows Application Error
Out of Memory or System Resources

While infecting a system (on AutoClose) the virus with a probability of 1/20 displays:

Are you sure you wish to Quit