W97M/Flop.A is a macro virus operating in the Microsoft Word 97 environment. It attacks active documents and the global template normal.dot.
Upon opening an infected document the virus prohibits interruption of program activities by keyboard; it turns off documents protection against viruses and suppresses displaying of warning window at writing into the global template. Then it deletes a rather large amount of items in the Word menu and by doing so it makes them inaccessible.
The virus checks its presence in files by the string 'VBACopyFloppy which is located in the first line of its code. If the virus does not find the string it performs the infection. First the virus attacks the global template and then the active document. It attacks documents when they are opened.
If the attacked document is on a diskette the virus copies all files from the diskette into a temporary directory.
© 1992-2004 ESET s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.