|
Softpanorama |
May the source be with you, but remember the KISS principle ;-)
|
The virus just replicate and consists of two macros:
When an infected document is opened the virus gets control via the AutoOpen macro and infects the NORMAL.DOT global template. In an infected NORMAL.DOT, the AutoOpen macro is remaned to NOP and the NOP macro is remaned to DateiSpeichern (German for FileSave).
Virus can spread only in the German version of MS Word 6.0 or 95; under other language
versions of Word for Windows, the virus will infect
NORMAL.DOT but will not spread further.
Several variants exist: (Nop.A, Nop.B, Nop.D, Nop.H, Nop.I
Copyright 1998, Nikolai Bezroukov. Standard disclaimer applies. As long as this copyright notice is preserved, and any changes are clearly marked as such, the author gives his consent to republish and mirror this text.
[an error occurred while processing this directive]