Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

W97M/Proverb.A

W97M/Proverb.A is a macro virus operating in the Microsoft Word 97 environment. It uses the "class" method of infection – it attacks the module "ThisDocument" which is present as a standard in each Word document or template. It attacks the global template normal.dot and Word documents. In its code are a lot of lines with commentary containing Russian proverbs and sayings.
After opening an infected document W97M/Proverb.A disables displaying of warning on writing into the template and turns off the anti-virus protection. Then it attacks the global template. It infects documents as they are opened, closed and a new one is created. It also contains a code in the macro with name ShowMess, but that is never executed. This code was supposed to display, depending on the Word version, text in Russian language.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.