Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

W97M/Bottra.A

W97M/Bottra.A is a macro virus operating in the Microsoft Word 97 environments. It attacks active documents and the global template normal.dot. Infection by the virus is indicated by presence of file tk.mxc vin in the root directory of the disk C:.
After the infected document is opened the virus exports its body to the file c:\tk.mxc. It attacks the global template normal.dot and opened file by importing its code from the created file into them. It attacks an opened document by importing the virus code into it from the created file. After operating in the the global template the virus attacks all documents when they are opened.
W97M/Bottra.A makes menu items Tools/Macro in the Word menu inaccessible. At the same time it turns the Word anti-virus protection off, it disables interruption of the activity by means of keyboard, suppresses displaying of warning windows at writing into the global template and sets the level of safety for Word to the lowest possible level.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.