W97M/Kumar.A Virus

 Virus Information - W97M/Kumar.A Virus:

W97M/Kumar.A is a macro virus. The virus will infect Microsoft Word documents and lowers security settings on the compromised computer.

Upon execution, the virus triggers the infection whenever an infected document is opened or closed using the following macros:

Document_Open
Document_Close

The virus contains the 'NVC infection marker string in the macro code of the infected document.

It modifies the registry at the following location;

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\10.0\Word\Security
"DontTrustInstalledFiles" = "0"
"Level" = "1"
"AccessVBOM" = "1"