W97M.Seqnum

This somewhat polymorphic W97M virus infects documents using Document_Open, and document templates using Document_Close. It stores an integer number in a file property variable in the VBA5 module properties. In the document infection, this variable is named "seqNum" in the macro code. During infection, a file is inserted with a name based on the following convention:

[Application.Path]\[seqNum].BAS

where "Application.Path" is the Microsoft Word program folder and "seqNum" is derived from the file property variable. The "seqNum" value gets modified in the inserted file when it exports the source into the "[seqNum].BAS" file