VIRUS NAME : W97M/Hich.a
Virus Characteristics
This threat is detected as W97M/Hich.gen. The virus disables Word virus protection feature and also disables the esc key. W97M/Hich.a is a parasitic virus. It may use the same subroutine name Document_Close if already present by inserting a call to it's viral routine. The virus then appends the viral routine. If Minute = 1, the virus can delete characters in the contents of the document. If Minute = 26, the virus can delete all contents of the document.
Symptoms
If minute = 1 or 26, some or all contents of document is deleted.
Method Of Infection
Opening an infected document will directly infect the local Word environment and any document opened thereafter.
|
