Antivirus and Security Software from Sophos

Sophos blogs

OF97/Crown-B

Aliases
  • OF97/Tristate-C
  • Triplicate.
Category
Type
What to do
Prevalence low high

Summary

 
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

OF97/Crown-B is a triple infector (Word, Excel and PowerPoint). When an infected document is run in Word the Macro Virus Protection for the other applications is turned off. However, the virus author has not yet worked out how to disable the Protection from within Excel or Powerpoint, a trivial piece of VBA programing. The actual replication routines are trivial variants on the code in other macros.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer