W97M/Pri.Q is a variant of the Melissa.A virus that infects Word 97 documents, disabling the macro warning feature. It sends an infected e-mail attachment via Microsoft Outlook. Additional payloads are programmed to trigger on December 25, including a reformat of the hard drive on Windows 9.x systems.
When W97M/Pri.Q is executed, an infected e-mail attachment is mailed to the first 50 addresses in each Microsoft Outlook address book. This action is performed on initial infection only. The infected message displays the following text:
Message Body: "This document is very Important and you've GOT to read this!!!"
1. A messsage box will display the following text:
3. The virus infects the NORMAL.DOT global template, infecting documents on "Close".
4. The virus will overwrite C:\AUTOEXEC.BAT, reformatting the hard drive and displaying the following text when the system is rebooted:
Your Computer Have Just Been Terminated By
-=CyberNET=- Virus !!!"