VIRUS NAME: X97M/Gluas.a
Virus Characteristics
This threat is detected as X97M/Generic and infects Excel97/2000 workbooks. X97M/Gluas contains two modules - "Code" and "Code1". It replicates by exporting its code to "c:\1.bas" and "c:\2.bas" and then removing these files once used. This virus will copy itself as personal1.xls to the C:\Program Files\Microsoft Office\Office\XLStart\ folder.
On the 17th of November, a message in Estonian will be displayed on opening and closing an infected document.
Symptoms
The above message is displayed on 17th November when opening and closing a document. The presence of the file personal1.xls in C:\Program Files\Microsoft Office\Office\XLStart\.
Method Of Infection
Opening an infected document or workbook will infect the host system thereby infecting any workbook used on the system thereafter.
|
