VIRUS NAME: X97M/Gluas.a
Virus
Characteristics
This threat is detected
as X97M/Generic and infects Excel97/2000 workbooks. X97M/Gluas contains
two modules - "Code" and "Code1". It replicates by
exporting its code to "c:\1.bas" and "c:\2.bas" and
then removing these files once used. This virus will copy itself as personal1.xls
to the C:\Program Files\Microsoft Office\Office\XLStart\ folder.
On the 17th of November, a message in Estonian will be displayed on opening
and closing an infected document.
Symptoms
The above message is displayed on 17th November when opening and closing
a document. The presence of the file personal1.xls in C:\Program Files\Microsoft
Office\Office\XLStart\.
Method
Of Infection
Opening an infected document or workbook will infect the host system thereby
infecting any workbook used on the system thereafter.
|
