It also replaces the "Tools/Macro" and "File/Tempates" menu selections
with the following message box:
Configuration conflict - menu item is not available.
This virus has two destructive payloads. The first activates if Word
is started at the exact minute - then it attepts to delete the
following files: All Excel worksheets ("*.XLS") from Excel directory,
All Access databases ("*.MDB") from Access directory, all program
groups ("*.GRP") from Windows directory and all help files from the
The second payload activates if the document is closed when the
seconds from the current time is less than eleven. At this point the
virus will search for ten different numbers and replace them with
other random numbers.
[Analysis: Sami Rautiainen, F-Secure]