This is a class module macro virus for Word97/2000 documents and templates. This virus will rename the first VB project from "ThisDocument" to "Love" within infected documents. This virus hooks the Word event of opening or closing documents in order to maximize the infection possibility. This virus will send itself via MAPI email using MS Outlook too all recipients from all available lists.
The email message will contain the following information:
- Subject: Important News From Alina Via [username]
- Body: News of today:=
- Attachment: Infected document
The virus will also disable the following menu command bars: Tools/Macro and View/Toolbars. It will also disable the macro protection warning. The virus will export its code to ~Alina.tmp and ~Love.tmp in the XLStart directory. These files are not infected.
There is a date activated payload associated with this virus. If the day of the month is the same number as the month, this virus will save the active document with a password of "Alina".