W97M.Class.A.Gen - Removal

The temporary text file does nothing, so you can delete it. Most variants of this macro virus use C:\Class.sys as the name of the temporary text file. Of the wild ones, variant "E" uses C:\Clinton.sys.

To remove this virus, run a full system scan, and repair any infected files. Delete all Class.sys and Clinton.sys files that are in the root of the C drive. If this does not fix specific documents, follow the instructions in the document How to repair Microsoft Word documents infected with macro viruses and then run a scan again.

Technical Details