The most award-winning anti-spyware software
Get serious about removing spyware with Spy Sweeper - the award-winning anti-spyware software trusted by millions of home computer users.
$29.95
Spyware & Virus Directory
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
W97M.Sherlock
Risk Level 1: Very Low
SUMMARY
W97M.Sherlock is a family of simple macro viruses that infect the currently active document and the Normal.dot template when an infected document is closed. Once Normal.dot is infected, clean documents will be infected when they are closed.
Protection
- Virus Definitions (Intelligent Updater) June 16, 2000
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 0 - 2
- Geographical Distribution: Low
- Threat Containment: Easy
- Removal: Easy
Damage
- Damage Level: Low
- Payload Trigger: None
- Payload: None
Distribution
- Distribution Level: Low
TECHNICAL DETAILS
The viruses in this family all contain a fairly simple encryption routine and infect documents when they are closed.
Upon infection W97M.Sherlock disables:
- Macro virus protection in Microsoft Word
- The option to display a notification dialog when saving changes that were made to the Normal.dot file
It also makes changes to the following Microsoft Word User Information:
- Name
- Initials
- Address
These changes may differ with each variant of W97M.Sherlock. (See sections that follow for specifics on some variants.)
Finally, it deletes all macros from the This Document module and places its own code there.
W97M.Sherlock.A
- Name = sherl0ck
- Initials = Bad
- Address = xxxx96@student.te.ugm.ac.id
W97M.Sherlock.F
- Name = Rio&Umi 4ever together
- Initials = Rio
- Address = rio96@student.te.ugm.ac.id
REMOVAL
To remove this virus:
- Run LiveUpdate to make sure that you have the most recent virus definitions.
- Start Norton AntiVirus (NAV), and run a full system scan, making sure that NAV is set to scan all files.
- If any files are detected as infected by W97M.Sherlock (or a W97M.Sherlock variant), click Repair.
- (Optional) Re-enable Microsoft Word macro virus protection. To do this, click Tools, click Options, and then click the General tab. (Office 2000 users: click Tools, click Security, and set the level to medium or high).
- (Optional) Reset your user information by clicking Tools, then Options, and then clicking the User Information tab.
Spy Sweeper 5.2 stops spyware in its tracks while offering home computer users the ability to configure the program to suit their specific needs, such as:
Choose a Quick, Full or Custom Sweep: With Spy Sweeper 5.2, you can easily choose to perform a quick, full or customized sweep. If you're looking for an immediate diagnosis, choose a quick sweep. For a pinpointed search, customize your sweep to have Spy Sweeper skip files by folder or file extension. For a deep cleaning, opt for a full sweep.
Exclude Files from a Sweep: Spy Sweeper allows you to save time during a sweep by skipping specific files or different sections of your PC. You can select specific file extension, such as .xls or .mpg to exclude.
Additional Highlights
As soon as it's installed, Spy Sweeper gives 360 degrees of protection against spyware, including:
Simple Sweeps: Detecting spyware and removing unwanted programs found on your computer in three effortless steps
Easy Management: Quickly and simply configure program, sweep and upgrade options
Fast Home: Use the home screen to access the most commonly used functions of Spy Sweeper
Shields Summary: A redesigned shields summary page makes it simple to see at a glance which shields are on or off
Action Alerts: Receive clear, easy-to-understand notifications when new spyware threats are detected
"Spy Sweeper remains a favorite for protection from spyware."
"This program's dominance is apparent as soon as you install it."
