Discovered: February 18, 1999
Updated: February 13, 2007 11:47:53 AM
Also Known As: O97M.Tristate.A, O97M.Tristate.B, O97M.Tristate.C, Macro.Office.Triplicate.C, O97M.Triplicate.C
Type: Worm
Norton AntiVirus users can protect themselves from this virus by downloading the current virus definitions.
Infected Word document repair notes:
In infected Word documents and templates, the virus has replaced any previously written VBA code in the ThisDocument module. Although Norton AntiVirus removes the viral code from the ThisDocument module, it is not possible to restore the overwritten VBA code.
PowerPoint Blank Presentation template file:
Scan and repair the Blank Presentation.POT module. This file is usually in the TEMPLATES directory of Microsoft Office. You might need to turn on ALL-FILE scanning in Norton AntiVirus Option.
Writeup By: Douglas Knowles