- Updated:
- February 13, 2007 11:34:01 AM
- Also Known As:
- Autoexec, JulyKill
- Type:
- Virus, Macro
W97M.JulyKiller is a MS Word 97 macro virus that was first discovered in Taiwan. Although the virus has received media attention, Symantec AntiVirus Research Center does not believe it presents any serious threat. There has not been a single report of a W97M.JulyKiller infection, nor has Symantec received any submissions of the virus from our worldwide customers as of July 2, 1999.
This macro virus infects Global Template (NORMAL.DOT), opened documents, and adds a new start-up template: "C:\AUTOEXEC.DOT". The payload is triggered on opening or closing document, creating a new document, or loading MS Word during the month of July. As described in detail below, the payload may replace "C:\AUTOEXEC.BAT" with one that includes a command to delete all files from "C:" drive. It has been confirmed that the virus can infect non-Chinese versions of MS Word 97.
Antivirus Protection Dates
- Initial Rapid Release version December 19, 2000
- Latest Rapid Release version December 19, 2000
- Initial Daily Certified version December 19, 2000
- Latest Daily Certified version December 19, 2000
- Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Easy
Damage
- Damage Level: Low
Distribution
- Distribution Level: Low
Writeup By: Raul K. Elnitiarta



