W97M.Hopel.A

W97M.Hopel.A is a macro virus that infects Microsoft Word documents when you click Open, Close, Save, New, or Exit. This virus has many different payloads that it can execute on Exit.

If an infected document is double-clicked, the virus saves the infected document as C:\Windows\Command\Nt.txt.

W97M.Hopel.A also overwrites the Autoexec.bat file with a non-ASCII character.

Protection

• Initial Rapid Release version February 6, 2003
• Latest Rapid Release version February 6, 2003
• Initial Daily Certified version February 6, 2003
• Latest Daily Certified version February 6, 2003
• Initial Weekly Certified release date February 12, 2003

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Low
• Number of Infections: 0 - 49
• Number of Sites: 0 - 2
• Geographical Distribution: Low
• Threat Containment: Easy
• Removal: Easy

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low