| Description:
|
Details
Macro.Excel.Tabej.a
This virus infects Excel sheets. It has one module "tabej" that contains four functions: auto_open, rx, inf, auto_close.
On opening an infected file Excel executes the auto_open virus function. This function installs the infected file TABEJ.XLS to the Excel Startup path file and assigns virus code as being executed on activating each sheet (SheetActivate handler). This handles is stealth virus routine: it removes virus code from sheets that are activated. The virus then reinfects them on closing (auto_close). |
