Technorati
Digg
Delicious
Reddit
StumbleUpon
Facebook
Yahoo
Twitter
Faves
Newsvine
- Discovered:
- January 20, 2004
- Updated:
- February 13, 2007 12:16:34 PM
- Also Known As:
- Macro.Word97.Simora [Kaspersky, W97M/Nid.H [F-Prot]
- Type:
- Macro
- Systems Affected:
- Macintosh, Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
W97M.Nid.B is a macro virus that infects Microsoft Word documents and the Normal.dot template when an infected document is opened. Once the Normal.dot template is infected, clean documents will also be infected when they are opened.
In most cases, if the system month is December, and the system locale is set to English (United States), when you open an infected document, Microsoft Word will stop responding. Selecting Tools > Macro > Macros or Tools > Macro > Visual Basic Editor causes the same result.
One indication of infection is the presence of the file, SimJo.drv, in the Microsoft Word folder.
Antivirus Protection Dates
- Initial Rapid Release version January 20, 2004
- Latest Rapid Release version January 20, 2004
- Initial Daily Certified version January 20, 2004
- Latest Daily Certified version January 20, 2004
- Initial Weekly Certified release date January 21, 2004
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Writeup By: Keiichi Ito
