| Description:
|
Details
Macro.Excel97.Tracker-based
This is a harmless macro-virus. It infects MS Excel 97/2000 workbooks upon their closing or saving with a new name. The virus disables the MS Excel97 macro-virus protection using direct registry access. In the Excel start-up folder, the virus creates the infected file "Base5874.xls".
Upon infecting every new computer, the virus saves, in document volume, the ID of the drive where Excel is installed. It stores drive IDs as documents custom properties. On tab File->Properties->Custom in the properties list are shown all IDs that the virus stores from moment it was created. All IDs begin with "IVID".
The virus has no payload routines. |
