Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

W97M/Groov.B

W97M/Groov.B is a polymorphic macro virus operating in the Microsoft Word 97 SR-1 environments. It attacks active documents and the global template normal.dot. This macro virus is able of spreading independently of the global template by means of the file data.dot. From the viewpoint of function it is identical with the virus W97M/Groov.A.
Polymorphic algorithm of the virus inserts lines with commentary after each line of virus code. The virus creates the commentaries by putting together Word user’s initials, current date and time, random number, name of the Word user and the active printer. A commentary like this looks as follows:

' Doc6/7/98 1:07:21 PM422Doc422HP LaserJet 4 on LPT1:

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.