W97M.Cobra.Family

Risk Level 2: Low

Printer Friendly Page|Rate this page

Discovered:: October 7, 1999
Updated:: February 13, 2007 11:34:56 AM
Type:: Macro

W97M.Cobra is a stealth macro virus that infects both the Microsoft Word Normal.dot template and the active document. On March 26 of any even year, W97M.Cobra inserts two extra functions into the active document and the Normal.dot template. One displays the message "You are infected with Cobra" and the other function deletes all files from drive C.

Antivirus Protection Dates

Initial Rapid Release version October 6, 1999
Latest Rapid Release version October 6, 1999
Initial Daily Certified version October 6, 1999
Latest Daily Certified version October 6, 1999
Initial Weekly Certified release date pending

Click for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

Wild Level: Low
Number of Infections: 50 - 999
Number of Sites: More than 10
Geographical Distribution: Medium
Threat Containment: Easy
Removal: Easy

Damage

Damage Level: High

Distribution

Distribution Level: Low

Writeup By: Andre Post

Technical Details

Search Threats

Search by name

Example: W32.Beagle.AG@mm

Internet Security Threat Report, Volume 16