Summary
Summary
Action- More Information
| Included in our products from | October 2000 (3.38) |
|---|---|
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please read the instructions for disinfecting macro viruses.
More Information
This is a simple virus. It contains two macros, auto_open and ClassModulo. The auto_open macro is run when the infected document is opened and instructs Excel to call the ClassModulo macro every time a new worksheet is activated.
When this happens, the virus creates a file in the OFFICE directory called PERSONAL.XLA and copies the viral macros into it. This file is automatically opened every time Excel is run. From then on, it infects every workbook used.
The virus uses a random module name and on a random day changes the Caption to 'SPalaci.Label.Is.Pac'.
The virus will be loaded every time Excel is started.
|
