Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

W97M.Saver.H

Feb 19, 2004 8:39AM PST

Discovered on: February 19, 2004
Last Updated on: February 19, 2004 03:53:18 PM

W97M.Saver.H is a macro virus that infects Microsoft Word documents and templates. It will create a copy of the infected document as "saver.dll."

Also Known As: Macro.Word97.Saver [Kaspersky], W97M/Doccopy.A [F-Prot]
Variants: W97M.Saver.G
Type: Macro

W97M.Saver.H infects Microsoft Word documents and templates upon opening an infected document.

After infecting a Word Document, the virus will check whether the "saver.dll" file exists in the "Doc_Copy" folder under the Microsoft Word folder. For example, C:\Program Files\Microsoft Office\Offfice\Doc_Copy.

If the file does not exist, then the virus will save a copy of the infected Document as "saver.dll" in the Microsoft Word folder.


http://securityresponse.symantec.com/avcenter/venc/data/w97m.saver.h.html

Discussion is locked