Threat Description



Aliases: W97M, Other:​W32/W97M
Category: Malware
Type: Virus
Platform: W97M


A program that does not fall into any other category.


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.


Detailed instructions for F-Secure security products are available in the documentation found in the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for further assistance.

Technical Details

W97M is F-Secure's Platform designation for a malicious program in Microsoft Office Word documents, from version Word 97 and onwards. The malware is written in Visual Basic for Application (VBA), a programming language used to provide additional embedded functionality in the Word document.Malware designed to target this platform was most common during the early 90's, when Word documents were the preferred choice for electronic business communications. The most common form of W97M malware was a macro virus. Representative examples of W97M malware include:


With changes in the threat landscape today, F-Secure has updated its platform designation convention and malware affecting this platform now uses the platform designation, 'WM'.


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Scan & clean your PC

F-Secure Online Scanner will scan and clean your PC in just a few minutes for free

Learn More