This virus infects Word 97 documents and executes whenever a Word document is closed or created.
The virus searches through all of the ActiveProjects for an infected module and any uninfected documents.
If the virus finds an uninfected document, the virus infects it and continues to search for more; infecting any uninfected documents.
If the day is the 20th, Wednesday the 15th, or Wednesday the 16th the virus' payload is triggered. The payload checks for the existence of the "autoexec.bat" file. If the file exists, it appends the following strings to the file:
ECHO MORNNING BABY,I NEVER LOVE ANY LIKE YOU..NA
ECHO WHAT'VE EVER HAPPENED I STILL LOVE YOU....NA
ECHO SEE YOU AT THE MILKY WAY OR MOON RIVER....NA
ECHO I WAITING FOR YOU. I LOVE YOU....NA NA NA NAAAA
FORMAT C:/AUTOTEST /Q/U
The virus then displays two message boxes to the user. The first message asks:
"!!! HAVE YOU DONE BACKING UP YOUR IMPORTANT DATA YET???"
And the second message states:
"!!! HO PHAR JA.!!! PUM AE VA !!!! ITS TOO LATE FOR DOING THAT...SO SORRY...."
*This virus has 40 lines of comments at the beginning.