| Description:
|
Details
Macro.Word.K302
This is polymorphic macro virus, it contains three macro: AutoOpen, body, m. It replicates on opening documents (AutoOpen). The virus does not manifest itself in any way. It contains the commented string: "k302".
The virus has unusual structure: the text of main infection routine in the virus code is commented. In case of need the virus creates a temporary macro, copies this text to there, removes comments, executed and deletes. |