W97M/Class.Q
Analysis
- Virus consists of one macro module within the class
storage
- Virus hooks Word event handlers which prevents
the opening or closing of documents
- Polymorphic by inserting configuration settings as comment lines between instruction code in the virus body