| Description:
|
Details
Macro.Excel.SW.a
This virus infects Excel sheets. It contains three functions in one module "sw": Auto_Open, Auto_Close, no.
While loading an infected document, Excel executes the auto function "auto_open", and the virus takes control. The virus "auto_open" function redirects its "no" function as activated upon opening a sheet. When this function takes control, it spreads the virus module to all active Workbooks.
Upon closing sheets, the virus deletes all modules in them that are not viral (i.e., module names are not "sw").
The virus deletes the menus Tools/Macro, File/Macro, View/Toolbars and some other ones. On Saturday and Sunday, the virus displays the MessageBox:
Ha! Ha! Ha! Idiot ! ! !
Today is rest day!
Why do you work so hard?
All work and no play make you a dull boy!
Come on! Let's go out and have some fun! |
