Summary

This is a simple Word 97 macro virus.

Additional Details

VARIANT:

Nsi.A

This variant disables the built-in macro virus protection and replicates during opening and closing. The virus contains the following commented line on the bottom of its code:

  'ThisDocument v 1.0 1999

  W97M/Nsi.B

W97M/Nsi.B is functionally like W97M/Nsi.A. The commented line in W97M/Nsi.B is:

'Psycode v1.0 1999

[Analysis: Katrin Tocheva, F-Secure]