|
Monday, 20 December 2004 |
W97M.Grurev is a simple Macro virus that infects Microsoft Words Normal.dot template.
When W97M.Grurev runs, it does the following:
Displays the following message box when a document is opened:
" Virus Gruver ativado."
The document footer displays a date stamp in the "dd MMMM, yyyy" format
The document header displays "Gruver ? um macro virus"
Displays the following message box when a document is closed:
" Macro virus Gruver "
Next, the virus attempts to copy itself into the Normal.dot template.
Removal Instructions:
Disable System Restore (Windows Me/XP).
Update the virus definitions.
Run a full system scan and delete all the files detected as W97M.Grurev.
Delete the value that was added to the registry.
Source: Symantec
|
