The virus infect the document on closing and the global macros area on opening an infected document. The virus affects the system macros in three seconds after opening, to repform this delay it hooks Timer events. In 32 seconds it also checks the system data and on Friday 13th deletes *.DOC file in the current directory and all files in the root of C: drive. The virus then displays a message in Russian.