|
Macro.Office97.Jerk famil Viruses Information
| Name: |
Macro.Office97.Jerk famil |
| Category: |
Viruses |
| Description:
|
Details
Macro.Office97.Jerk family
These are multi-platform macro-viruses infecting Office97 components: Word documents and Excel workbooks and sheets. The viruses contain two auto-macros in Excel sheets and Word documents: Document_Close in Word documents, and Workbook_Deactivate in case of Excel workbook or Worksheet_Deactivate in case of Excel sheet.
The viruses replicate themselves in Excel upon deactivating workbooks. In Word, the viruses replicate upon document closing. Upon spreading, the viruses infect not only "native" objects, but also export their code to another Office component if it is installed in the system.
The viruses turn off the VirusProtection MS Office option.
Each month from June to December on the 14th ,the "Jerk.a" virus displays the message:
Class.Poppy
I think is a big stupid jerk!
On the same date "Jerk.b" and "Jerk.d" display an encrypted variant of the same message:
www.all.net
V guvax vf n ovt fghcvq wrex! |
Top Viruses Visited Pages:
Invader. - 239 visits
not-a-virus:RiskWare.Tool.RegPatch. - 73 visits
Worm.P2P.Harex. - 66 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win32.Hidra - 43 visits
Win16.Klon.1177 - 42 visits
Marine.500 - 35 visits
Random Viruses Pages:
Amt.300
HLLP.Tomsk.850
Win32.Menta
Jackel Famil
Macro.Word.Mos
XIV.224
Blah.338
Email-Worm.Win32.Bagz.
Macro.Word97.FootPrin
Grapje.103
|
