It consisted of a Sub called Document_Open or Document_Close in the module ThisDocument. It keeps track of whether you have saved the document or not so you don't get a prompt to save changes if you haven't made any changes yourself. It turns off Macro Virus Protection, Prompt to Save Normal.Dot and Confirm Conversions. It works on SR-1, which stops most other macro viruses.
In the registry key "HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}" it changes the value "(default)" to "Little Miss Nick", which changes the label for "My Computer" and adds/changes the value "DefaultIcon" to "C:\\WINDOWS\\SYSTEM\\shell32.dll,10", which changes the icon for "My Computer".
It changes the registry value "HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000008\SMTP Display Name" to "Asexual" and "HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts\00000008\SMTP Email Address" to "nick@virusbtn.com". That has the effect of making outgoing messages appear to originate from "nick@virusbtn.com"
It registers WinZip to the user "Nick FitzGerald the queen". It changes the registry value "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Hearts\name to "NicKKK".
It runs the DOS command "label c: n0nuts", which changes the label of drive C.
Information about macro viruses.
MVK 97 can remove Brenda and other Word 97 viruses automatically.