W97M.Twopey.C

W97M.Twopey.C is similar to the W97M.Opey family of macro viruses in style and structure, although the infection routine differs slightly. The virus infects on document close.

W97M.Twopey.C disables the Macro, Template and Add-in, and Customize functions from the Tools menu.

The virus writes its source code to the System.txt file, which is a temporary file in the startup path for Microsoft Office. This file is removed after infection.

Summary