Technorati
Digg
Delicious
Reddit
StumbleUpon
Facebook
Yahoo
Twitter
Faves
Newsvine
- Updated:
- February 13, 2007 11:49:58 AM
- Also Known As:
- W97M.Surround
- Type:
- Macro
W97M.Surround is a macro virus that infects Microsoft Word97 documents. The virus is located in a macro module named "Surround". It copies itself from the file "C:\surround.key" which is created after the viral macro validates itself. The "C:\surround.key" file is given hidden and system attributes. This virus infects the NORMAL.DOT and all active documents.
On the 29th of December, W97M.Surround will delete files matching C:\WIN*\WIN.COM and display the message box:
Antivirus Protection Dates
- Initial Rapid Release version December 20, 1999
- Latest Rapid Release version December 20, 1999
- Initial Daily Certified version December 20, 1999
- Latest Daily Certified version December 20, 1999
- Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Easy
Damage
- Damage Level: Low
Distribution
- Distribution Level: Low
Writeup By: Andre Post
