| Description:
|
Details
Macro.Word97.Swatch.b
Swatch.b is a Word97 macro virus. It contains three macros: AutoOpen,RepToDocs, RepToNormal.
There is also a macro FileSave present, but not with the given version. When an infected file is opened, the virus creates a temporary archive named
Tmp.bas
in the C: drive root directory where its code is written. After this it imports a temporary file into normal.dot, thus allowing other MS Word files to become infected. Oncethe current document is infected the virus proceeds to delete the Tmp.bas file from the disk.
In general this virus does not contain any destructive functions. |
