Threat Description



Aliases: W97M, Other:​W32/W97M
Category: Malware
Type: Virus
Platform: W97M


A program that does not fall into any other category.


Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.

Technical Details

W97M is F-Secure's Platform designation for a malicious program in Microsoft Office Word documents, from version Word 97 and onwards. The malware is written in Visual Basic for Application (VBA), a programming language used to provide additional embedded functionality in the Word document.Malware designed to target this platform was most common during the early 90's, when Word documents were the preferred choice for electronic business communications. The most common form of W97M malware was a macro virus. Representative examples of W97M malware include:


With changes in the threat landscape today, F-Secure has updated its platform designation convention and malware affecting this platform now uses the platform designation, 'WM'.


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More