H Another polymorphic member of this large family of macro viruses, this time with a range of payloads that could prove frustrating to users. This macro virus infects documents created by Word97 and Word2000 and is written in Visual Basic for Applications 5.
H contains a randomly triggered payloads.
The activation of these payloads depends on which random number is generated by the virus code. These inserted comments generally contain information on the application version, recent files used, the startup path and the document name. In addition to these annoying behaviors, on the 13th of November, Class. H can minimize or maximize the current window, before exiting Word.