This is a harmless macro-virus. It infects MS Excel 97/2000 workbooks
upon their closing or saving with a new name. The virus disables the MS Excel97
macro-virus protection using direct registry access. In the Excel start-up
folder, the virus creates the infected file “Base5874.xls”.
Upon infecting every new computer, the virus saves, in document volume, the ID of
the drive where Excel is installed. It stores drive IDs as documents custom
properties. On tab File->Properties->Custom in the properties list are shown all IDs that
the virus stores from moment it was created. All IDs begin with “IVID”.
The virus has no payload routines.
|Find out the statistics of the threats spreading in your region|