Database : X97M.BDoc2

Free Web Hosting Provider - Web Hosting - E-commerce - High Speed Internet - Free Web Page

X97M.BDoc2

Virus Name:	X97M.BDoc2
Aliases:	None known
Type:	MS Excel macro virus
Resident:	Yes, within Excel environment
Stealth:	No
Trigger:	If the day is the 26th of the month, this virus displays a message in an Asian language. If the day of the month is the 5th, 10th, 15th, 25th or 30th, it causes Windows to shut down.
Payload:	This virus tries to disable the Macro command on the Tools menu, but it uses a hardcoded string value which works only in a specific Asian version of Excel.
Comments:	X97M.BDoc2 is a Excel macro virus that infects the active workbook and inserts an infected workbook in the \XLStart folder. This virus is activated when opening, closing, or saving a file, and when Excel starts or exits. However, it only infects workbooks when files are opened, closed, or saved. When this virus is activated, it disables: Macro virus protection in Excel. The display of alerts when a modified workbook is saved. Screen updating. The modifications are not displayed; this is done to hide its activities.\ The virus infects the active worksheet by creating the module Bdoc2, into which it inserts itself. This virus also inserts the infected file AutoRun.xls into the \XLStart folder so that it will be executed when Excel starts.