W97M.Nagem.F

Risk Level 1: Very Low

Discovered:
January 9, 2001
Updated:
February 13, 2007 11:34:44 AM
Type:
Macro

W97M.Nagem.F is a Microsoft Word macro virus that infects the Normal.dot template and any active Word documents. To determine whether your computer is infected with the virus, do the following:
  1. Start Microsoft Word.
  2. Click Tools, point to Macro, and then click Macros.
    If your computer is infected with this virus, you will see the message "This Command is Unavailable this time."
The virus does the following:
  • If the computer's date is past the 10th of the month, then the virus may shut down Windows.
  • If the computer's date is past the 20th of the month, then W97M.Nagem.F assigns a password to the active document. If the active document already had a password, the old password is overwritten with the new password. The new password is password.


Antivirus Protection Dates

  • Initial Rapid Release version January 9, 2001
  • Latest Rapid Release version January 9, 2001
  • Initial Daily Certified version January 9, 2001
  • Latest Daily Certified version January 9, 2001
  • Initial Weekly Certified release date pending
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Moderate

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: Low
Writeup By: Andre Post

Search Threats

Search by name

Example: W32.Beagle.AG@mm
ThreatCon Widget
Internet Security Threat Report, Volume 16
Symantec DeepSight Screensaver