Virus.MSOffice.Confused

Class Virus
Platform MSOffice
Description

Technical Details

This multi-platform macro-virus infects Office97 components: Word documents

and Excel workbooks and sheets. The virus contains two auto-macros in Excel

sheets and Word documents: Document_Close and Workbook_Deactivate. The

virus is Chinese (Taiwan) specific and cannot replicate under other MS

Office releases.

The virus replicates itself in Excel on de-activating workbooks, and in Word, the

virus infects documents that are being closed. The virus also replicates

from Excel workbooks to Word documents (if a Word application is active), as

well as from Word documents to Excel workbooks (if Excel is active).

The virus contains the “copyright” text:

Copyright (C) 1998 by FlyShadow ~^^~ – Confused Memories