This is a virus detection. Viruses are programs that self-replicate recursively, meaning that infected systems spread the virus to other systems, which then propagate the virus further. While many viruses contain a destructive payload, it's quite common for viruses to do nothing more than spread from one system to another.
Indication of Infection
On an infected system the virus hides the FILE|TEMPLATE and TOOLS|MACRO functionality. Warning: It is important not to use this command, as you will execute the viral code.
The virus maintains a Win.INI entry: INTL|ICOUNT = to count the number of times a document is printed. The virus also maintains a Win.INI entry: COMPATIBILITY|NOMVIR = for debug purposes.
When exiting Word there is a 1-in-6 chance that the macro will set the FILE|SAVEAS password to 'gATes?' (where ? is one randomly calculated letter). If you are affected please read "Add. Information".
When saving a document and the counter is equal to 10 or 20 it will delete the files C:\AUTOEXEC.BAT and C:\CONFIG.SYS .
When saving a document on an even numbered day after 9PM it will insert the text
'F*** Microsoft & Bill Gates'c at the end of the document.
On every 23rd / December 25th / January 1st or Friday 13th it will delete the files
User.da0, Systemda0, User.dat and System.dat in the C:\WINDOWS directory on Windows95.
Methods of Infection
General Macro Virus Information