This is an encrypted macro virus. It contains two original macros that have different names in infected documents and NORMAL.DOT:
Documents NORMAL.DOT
AutoOpen FileSave
FileSaveAs FileSaveAs
The virus infects the system and documents on opening and saving files. It creates a new variable in infected documents:
Dzutaqshiri = (c)Hikmat Sudrajat, Bandung, April 1996
In some cases (on error while infecting a document?) it prints the message to the status line:
This command is not available because a document window is not active
