New Office macro virus found

The heat of the race to detect and nullify new viruses appears second only to the contest among virus fighters to be first with the cure.

Two antivirus software leaders, Symantec and Network Associates' McAfee division, have nabbed a new macro virus that threatens files created by Microsoft Office applications. Both have posted new definitions that detect and eradicate the 097M.Tristate macro virus.

You can download the new definitions for any Symantec antivirus product from LiveUpdate, the company's antivirus service, which pushes virus updates to registered Symantec customers.

"It's a scheduled component that checks frequently for new virus threats," says Enrique Salem, Symantec's chief technology officer.

Unregistered Symantec customers can get the new definitions from the Symantec AntiVirus Research Center on the company's Web site --

You can also eradicate the 097M.Tristate virus using McAfee's VirusScan updated with the most recent definition file, available on the company's Web site. VirusScan also will prompt you to periodically update your virus definitions data.

"Trendy" macro viruses

Macro viruses similar to 097M.Tristate are popular among virus writers, according to Symantec officials. The 097M.Tristate macro virus cross-infects Microsoft Word documents, Excel spreadsheets and PowerPoint presentations.

The 097M.Tristate virus creates a viral workbook called BOOK1 in the Excel startup directory. In PowerPoint, 097M.Tristate adds a viral module that's linked to the AutoShape object covering an entire slide. During its final leg, 097M.Tristate replaces the content of an infected Word document with viral code.

Once considered the exclusive domain of research labs, macro viruses have transitioned into general circulation. Despite its prolific reproduction, Symantec classifies 097M.Triplicate as rare, saying it has yet to spread beyond the United States. The 097M.Tristate macro virus, also known as Triplicate and Crown, is currently the eighth most common virus submitted to Symantec's lab. The company's Scan & Deliver system has received 132 submissions of the 097M.Tristate virus in the past two weeks.

McAfee classifies 097M.Tristate as high risk. The virus apparently removes virus-warning protection from both Excel and Word.

Join the PC World newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.
Show Comments

Most Popular Reviews

Latest Articles


PCW Evaluation Team

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Armand Abogado

HP OfficeJet 250 Mobile Printer

Wireless printing from my iPhone was also a handy feature, the whole experience was quick and seamless with no setup requirements - accessed through the default iOS printing menu options.

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?