Virus.MSPPoint.Kelly

Class Virus
Platform MSPPoint
Description

Technical Details



This macro virus infects the MS PowerPoint presentations. The virus
contains one macro “Jd” in the “Kelly” module. The virus code is activated
on the MouseOver events on the infected form, it then runs its main routine
and infects all form in opened presentations. While infecting the virus
copies its code to the victim form and sets handler for MouseOver event to
its own procedure. As a result the virus code runs automatically when mouse
moves over infected form.


This virus does not have payload procedure. The code of virus contains the
comment:



Copyright (C) 1998 by FlyShadow ~^^~ – Kelly