W97M.Nori.A

Risk Level 2: Low

Printer Friendly Page|Rate this page

Discovered:: June 13, 2002
Updated:: February 13, 2007 11:39:17 AM
Also Known As:: Macro.Word97.Nori
Type:: Macro

W97M.Nori.A is a typical Microsoft Word macro virus that carries a potentially very destructive payload. It spreads by infecting the global template, Normal.dot, and the currently active document. The payload is activated on April 1 of every year, and it deletes either all files on your hard disk (rare) or all the text from the body of infected documents.

Antivirus Protection Dates

Initial Rapid Release version June 13, 2002
Latest Rapid Release version June 13, 2002
Initial Daily Certified version June 13, 2002
Latest Daily Certified version June 13, 2002
Initial Weekly Certified release date June 19, 2002

Click for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

Wild Level: Low
Number of Infections: 0 - 49
Number of Sites: 0 - 2
Geographical Distribution: Low
Threat Containment: Easy
Removal: Easy

Damage

Damage Level: High

Distribution

Distribution Level: Low

Writeup By: Atli Gudmundsson

Technical Details

Search Threats

Search by name

Example: W32.Beagle.AG@mm

Internet Security Threat Report, Volume 16