Selected viruses, spyware, and other threats: sorted alphabetically

W97M/Ekiam.A is a macro virus operating in the Microsoft Word 97 environment. It attacks the active documents and the template NORMAL.DOT . It consists of two modules named Maike and Love.

After an infected document is opened the W97M/Ekiam.A sets the lowest level of Word protection, disables the displaying of warning messages and allows auto macros usage. It turns the Word anti-virus protection off and the confirmation of global template saving by the user.

Note: In following text a symbolic inscription %windir% is used instead of the name of directory in which Windows operating system is installed. Of course, this may differ from installation to installation. The inscription %system% is used for the system directory containing the operating system.

W97M/Ekiam.A exports its code into the file %system%\Maike.sys, and imports it from this file when attacking the documents or global template. The virus attacks the documents during opening, closing or saving. In order to make detection more difficult it disables the item Tools/Macro in the Word's menu and Tools/Templates and Add-inns.

In the body of the virus there is following comment:

' This stupid Macro is coded from Vampir and many grezz to my friends and Maike the little good looking girl
' VIRIINAME: MAIKE

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.