Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

W97M/Thus.EP

W97M/Thus.EP is a macro virus operating in the Microsoft Word 97 environment. It uses the "class" method of infection – it attacks the module "ThisDocument" which is present as a standard in each Word document or template. It attacks the global template normal.dot and Word documents. It is derived from W97M/Thus.A.
Upon opening an infected document W97M/Thus.EP attacks the global template and the active document. After infecting the template the virus attacks all documents while they are being opened and new documents. Unlike W97M/Thus.A this variant uses to mark infected documents by means of a note with text 'Matrix' instead of the text 'Thus_001'.
Apart from attacking documents and templates the virus W97M/Thus.EP has no other manifestation. It does not cause deleting of files on the disk as the version W97M/Thus.A does.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.