This virus contains four macros:
NORMAL.DOT Infected files
AntiVirus AutoOpen
FileSave AntiVirus
WordHelp WordHelp
WordHelpNT WordHelpNT
It infects the system while opening an infected document (AutoOpen) and writes itself to documents on saving them (FileSave).
On WordHelp and WordHelpNT it writes new colors to Colors section in system profiles (WIN.INI file).
