This virus contains four macros:
NORMAL.DOT Infected files
HaHa HaHa
FileSaveAs FileSort
FileSort AutoOpen
EditSize EditSize
The virus infects the system on opening an infected file (AutoOpen) and infects the files that are saved (FileSaveAs).
Macro "HaHa" is virus-ID macro, it is commented by string:
Wondering how to fix your program?
and contains the remark:
REM Sure Hate it for ya!!
The virus deletes all texts within document, inserts the strings:
i said:
say goodbye to all your stuff
(look at that hard drive spin!)
