Malware type: Macro

Aliases: W97M.Cont(Symantec), WM97/Cont(Sophos), Virus.MSWord.Blaster(Kaspersky), W97M/Cont.B(Avira), W97M/Cont.A (exact)(F-Prot), W97M/Cont.gen(McAfee)

In the wild: Yes

Language: English

Platform: Windows

Description: 
This Macro virus infects Word document files on THISDOC. It drops a file named “cont.dbl” on C:\ drive, which is the copy of the macro virus and deletes it after the end of the macro. It hooks itself to the macro “interrupt” document open and document close modules.

For additional information about this threat, see:
Technical Details

Description created: Mar. 9, 2000 1:45:50 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.