Virus.MSExcel.Tracker-based

Technical Details

This is a harmless macro-virus. It infects MS Excel 97/2000 workbooks

upon their closing or saving with a new name. The virus disables the MS Excel97

macro-virus protection using direct registry access. In the Excel start-up

folder, the virus creates the infected file “Base5874.xls”.

Upon infecting every new computer, the virus saves, in document volume, the ID of

the drive where Excel is installed. It stores drive IDs as documents custom

properties. On tab File->Properties->Custom in the properties list are shown all IDs that

the virus stores from moment it was created. All IDs begin with “IVID”.

The virus has no payload routines.