Virus Alert: W97.Diperis.A

Virus Alert: W97.Diperis.A

W97.Diperis.A is a virus that infects and downloads Microsoft Word files and templates. Virus has the potential to reduce the level of security protection against macros in Word.

OS infection

Windows 2000, Windows 98, Windows Me, Windows NT, Windows XP

Release Date:

July 20, 2004

Describe

When W97.Diperis.A executes, the virus will perform the following tasks

  1. Contagious and temporary files of Microsoft Word, Normal.dot.

  2. Infect the open word files.

  3. Delete the following files:
    & nbsp;

    • C: Program FilesMicrosoft OfficeOfficeStartUp 1 AzSoft_watermark_big.png AzSoft_watermark_small.png cong-nghe?p=1 des.txt en_metadesc.txt en_name.txt getpageinfo.sh getpagelink.sh imglink.txt imglist.txt img.quantrimang.com label:Some Text link_original.txt link.txt log.txt meta_desc.txt name.txt news t-142619 testimg2-0.jpg testimg2-1.jpg testimg2.jpg testimg3.jpg testimg.jpg thumb tim-hieu-excel-2016-200.jpg title_vn.txt tmp02.html tmp03.html tmp2.html tmpdesc2.txt tmpdesc3.txt tmpdesc4.txt tmpdesc5.txt tmpdesc6.txt tmpdesc7.txt tmpdesc.txt tmp.html tmpresult.txt tmptrans.txt transresult.txt wm.quantrimang.com www.mailenable.com www.microsoft.com .dot

    • C: WINDOWSFAQ.doc

    • C: WINDOWSApplication DataMicrosoftExcelXLSTARTexcel2r.xls

    • C: Program FilesMicrosoft OfficeOfficeXLStartexcel2r.xls

    • C: Windows.reg

    • C: fix.bat

    • C: Sex.txt.vbs

      Attention: Some of the features are related to the O97M virus family.

  4. Reduce the level of security configuration of Microsoft Word.

  5. Turn on the following Microsoft Word toolbars:
    & nbsp;

    • Control Toolbox

    • Forms

    • ActiveX Control

    • Visual Basic

  6. Make copies of the virus with the following names:
    & nbsp;

    • C: My DocumentsWord97m2r.txt

    • C: My DocumentsThisDocumentm2r.txt
      & nbsp;