Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

W97M/Pri.A

W97M/Pri.A is a polymorphic macro virus operating in the Microsoft Word 97 environment. It uses the "class" method of infection – it attacks the module "ThisDocument" which is present as a standard in each Word document or template. It attacks the global template normal.dot and Word documents.
After opening an infected document W97M/Pri.A turns off the Word anti-virus protection and disables displaying of warning on storing the global template and on macros conversion. It infects the global template and then it attacks documents as they are being opened.
The virus prevents displaying the code in Visual Basic by making the editor inaccessible. The virus contains an activating routine which inserts 10 randomly created colourful pentagons into the active document in case that number of minutes equals the number of seconds.
As a note in the virus body there is the text 'W97M/PSD ...porn star dreams? [(c)1998 ALT-F11 code hack]

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.