Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically


X97M/Barisada.D is a macro virus infecting in the Microsoft Excel 97 environment. It uses the "class" method of infection – it attacks the module "ThisWorkbook" which is present as a standard in each Excel document or template.
After an infected document is opened X97M/Barisada.D is finding out whether there is the file khm.xls in the directory at which the variable Application.StartupPath is pointing. If that file does not exist the virus will create it upon finishing work with the infected document. Documents located in that directory are run always when Excel is executed. This variant does not contain activating routine as the virus X97M/Barisada.A does. In addition, there are several lines with comments in its code.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.