Virus.MSExcel.Yawn

Technical Details

This virus creates an infected workbook “PERSONAL.XLS” in the Excel start-up
folder. Upon Excel startup, this workbook is automatically loaded and the virus
gains control. The virus activates upon the opening of every workbook and infects it.

To disable the Excel macro-virus protection, the virus uses calls to the system
functions that directly modify the system registry. The virus hides itself by
deleting the menu item “Tools/Macro”.

The virus has no any payload.