W97M/Myna.C

description-logoAnalysis

  • Virus consists of one macro module within the class storage
  • Virus hooks Word event handlers which prevents the creating or opening of infected documents
  • Virus searches the macro storage of host files for the string
    "MYNAMEISVIRUS"
    which exists in the virus body, as a means to determine if the host file is already infected

Telemetry logoTelemetry