Selected viruses, spyware, and other threats: sorted alphabetically
W97M/Walker.E |
W97M/Walker.E is a macro virus using the "class" method of infection – it attacks the module "ThisDocument" which is present as a standard in each Word document or template. It attacks the global template normal.dot and Word documents. It is interesting by the fact that it contains the macro ThisDocument which is encoded and is being decoded “at a run” during the virus activity.
After the infected document is opened the virus W97M/Walker.E decodes the macro ThisDocument and attacks the global template. After that it attacks documents when they are being opened. In the virus body there is a line with the note:
'Sattelite v1.0
The virus uses this line to identify documents that have already been infected.
© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.
