This is a virus detection. Viruses are programs that self-replicate recursively, meaning that infected systems spread the virus to other systems, which then propagate the virus further. While many viruses contain a destructive payload, it's quite common for viruses to do nothing more than spread from one system to another.
Indication of Infection
During infection by this virus, it will attempt to distribute a copy of itself via MAPI email to the first 50 available names in the Outlook address book. After the email routine, this virus modifies the registry with this information:
"! Ghauri2 !" = "This machine salutes to GodOfBasic"
There is a one in 1000 chance that the startup configuration file AUTOEXEC.BAT will be modified with 1000 occurrences of an output message on the following dates:
"25th March 1997, A memorable day of my life? ...Ghauri2"
"This machine is struck by the great GHAURI2 Virus !!! ...coded by GodOfBasic"
"Say Happy Birthday to GodOfBasic! He is" [year - 1978] " years old today."
"It's 14th Aug. Say Happy Birthday to Pakistan !!! ...Ghauri2"
This virus will attempt to delete all *.INI files in the c:\windows folder on May 28.
Methods of Infection
This virus hooks the Word event handler of opening documents in order to run its code. Once the global template NORMAL.DOT is infected, any document used on the system will become infected.
W97M/Ghauri@mm, WM97/Melissa-BI (Sophos)