White Papers
W97M.Death.C (Symantec)
Overview
Name: W97M.Death.C
Discovered on: November 13, 2001
Last Updated on: November 13, 2001 at 09:51:41 PM PST
W97M.Death.C is a Microsoft Word macro virus that infects the Normal.dot template and the active document. It also keeps track of how many times it has run on the computer.
Type: Macro
Threat Assessment: Low
Threat containment: Easy
Removal: Easy
Technical description: W97M.Death.C is activated when a document is opened. It starts by creating the directory structure
\Windows\Application Users\AddFile
on the currently active drive.
It then creates the following files in the \AddFile folder:
Pesquisa de Opiniao.doc (This file is usually 0 bytes in size.)
Death Kiss.Ini
Next, the virus reads a number from the Death Kiss.Ini file and increments the number by one. The number equals how many times the virus has run on the computer.
Finally, W97M.Death.C attempts to infect the Normal.dot template file and the active document.
| Publisher | Symantec | File Format | HTML |
|---|---|---|---|
| Date Published | November 2001 | Downloads | 2 |
| Format | White Papers | ||
| Topics |
|
||
-
Did you find this white paper useful?
White Paper RSS
Download
Register
