This is the encrypted virus, it contains four macros:
in NORMAL.DOT in infected documents
FileOpen TempFileOpen
FileSave TempFileSave
AutoExec TempAutoExec
TempAutoOpen AutoOpen
On FileOpen or FileSave (file opening or saving) the virus writes its code to the file. On AutoOpen the virus installs itself into the system. In case of error displays the message:
Unexpected error! Error code -
On AutoExec the virus depending on system random counter either prints to status line the string "x/500", where "x" is a random number, or prints "500/500" and halts the computer.
The virus contains commented strings:
*********************************
* -x UlTiMaTe x- *
* CCCCC H H AAAAA OOOOO SSSSS *
* C H H A A O O S *
* C HHHHH AAAAA O O SSSSS *
* C H H A A O O S *
* CCCCC H H A A OOOOO SSSSS *
* -x v2.3 - 1st June, 1996 x- *
*********************************
