Threat Encyclopedia

Subtitle

Virus, spyware, worms and other threat descriptions

Selected viruses, spyware, and other threats: sorted alphabetically

0-9
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
 

O97M/Tristate.A

This multi-partite macro-virus infects, as the first one in history, three templates from the Office 97 package - specifically MS WORD, MS EXEL and PowerPoint. The virus disables the macro protection warning. In case of Word it will do it by means of common VBA commands but for Exel and PowerPoint it must adjust value in registers. The virus is activated: in Word - when an infected document is closed, in Exel - when a table is deactivated, and in PowerPoint only with probability 1-in-7 by clicking at an invisible pattern. The infection takes place in all applications in a standard way. In all infected documents the following text is visible:

<!--1nternal-->
Triplicate v0.1 /1nternal

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.