This macro virus infects documents and templates that are closed in Microsoft Word. It deletes all user macros from infected files.On the 1st day of each month, it sends a log file via FTP to its author containing the following information:
- Time and date of infection
- User name of the infected system
- User address of the infected system