1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar






W97M/Mimir.A is an overwriting Word 97 macro virus with a mass mailing ability.

Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.

Technical Details

When an infected document is opened, the virus will change the title of the Word's window to:

    MiMiR is giving your computer new intelligence!

Then the virus ovewrites the three recently used documents as well as every file with ".doc" extension in the "C:" drive with the active document.

Finally it attempts to use Outlook to send a message to the every person listed in the "Contacts" folder. The body of these messages contains the following text:

    Some nice jokes you got to read!! :))

The active document is attached to the message as well.

Technical Details: Sami Rautiainen, F-Secure

Submit a sample

Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Scan and clean your PC

F-Secure Online Scanner will scan and clean your PC in just a few minutes for free