VirusW97M/Groov.B
Analysis
- Virus consists of one macro module named either
"groovie" or "orbit"
- Virus hooks Word event handlers which prevents
the printing, opening, closing and saving of infected
documents, or exiting Word
- Polymorphic by inserting comment lines between instruction code in the virus body
