Overview
This is a virus detection. Viruses are programs that self-replicate recursively, meaning that infected systems spread the virus to other systems, which then propagate the virus further. While many viruses contain a destructive payload, it's quite common for viruses to do nothing more than spread from one system to another.
|
Minimum DAT
4072 (2000-04-05) Updated DAT4072 (2000-04-05) |
Minimum Engine
5.1.00 File LengthN/A |
Description Added
2002-12-11 Description Modified2002-12-11 |
Malware Proliferation
Characteristics
This threat is detected as W97M/Generic. It will disable the macro protection warning on Word97 and set the security level to low on Word2K. The Tools/Macro menu option will be disabled.
If day is 16th of any month, the virus will display the following message:
Symptoms
The above message displayed on 16th of any month.
Method of Infection
Opening an infected document will directly infect the local Word environment and any document opened thereafter.
Removal
Use current engine and DAT files for detection and removal.
It is very common for macro viruses to disable options within Office applications for example in Word, the macro protection warning commonly is disabled. After cleaning macro viruses, ensure that your previously set options are again enabled.
AVERT Recommended Updates:
* Malformed Word Document Could Enable Macro to Run Automatically (Information/Patch)
Variants