O97M.Tristate

O97M.Tristate is a Microsoft Office 97 macro virus that has been found in-the-wild. The Symantec AntiVirus Research Center has recently received reports of O97M.Tristate infection through the Scan & Deliver system. The differences among the A, B, and C variants are minor changes to the comments in the macro code.

Protection

• Initial Rapid Release version February 22, 1999
• Latest Rapid Release version February 22, 1999
• Initial Daily Certified version February 22, 1999
• Latest Daily Certified version February 22, 1999
• Initial Weekly Certified release date pending

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Medium
• Number of Infections: 50 - 999
• Number of Sites: 3 - 9
• Geographical Distribution: Medium
• Threat Containment: Easy
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: Low