A Digital Age Deserves A Digital Leader

New Word macro virus spotted

New Word macro virus spotted

Postby dlt » Thu Jan 02, 2003 5:14 am

Anti-virus software maker Symantec has put out an advisory about a new macro virus for Microsoft Word, which, in a worst-case scenario, can overwrite the master boot record of any and all drives on a computer.

The virus, named W97M.Killboot, infects a currently active document and the Normal.dot template when an infected document is closed. Once this template is infected, clean documents will be infected when they are closed.

It creates the file C:\Setver.exe, which the Symantec antivirus products detect as Trojan.Killboot. If Trojan.Killboot is run, it writes the viral code into the Master Boot Record; this can overwrite the MBR on all physical hard drives with zeroes.


PROfessional Member
User avatar
Posts: 705
Joined: Mon Mar 11, 2002 11:56 am
Location: New England, USA

Return to Security & Virus

Who is online

Users browsing this forum: No registered users and 0 guests