Jan 22

W97M.Suppl.A / W95.Suppl.16384.A

By admin
Add comments
Virus
 
9 views

Name W97M.Suppl.A / W95.Suppl.16384.A
Type
Affected
Risk Level 1: Very Low
Discovered September 20, 1999
Update February 13, 2007 11:50:40 AM
Length
Info W97M/W95.Suppl.16384.A is a that spreads a Microsoft Word 97 macro that hooks Winsock32 APIs, by replacing the Wsock32.dll system file. The payload overwrites the files with certain filename extensions, as described in detail in the "Technical Details" section.

The arrives as a MIME-encoded email/newsgroup attachment, named Suppl.doc.
Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 – 49
  • Number of Sites: 0 – 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Low
Details >W97M.Suppl.A / W95.Suppl.16384.A
convert this post to pdf. Tags: ,

Related Virus

"Free Scan W97M.Suppl.A / W95.Suppl.16384.A

Print This Virus article Print This Virus article

This entry was posted on Tuesday, January 22nd, 2008 at 3:27 pm and is filed under Virus. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Comment

You must be logged in to post a comment.