Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically


X97M/Squared.A is a macro virus operating in the Microsoft Excel 97 environment. Module with the virus is named nt² and consists of two macros with names auto_open and SearchSelf. The module name contains HTML incompatible character which has ASCII code 178 and which is in HTML displayed as ². The character looks like a crosshatched rectangular.
After an infected document is opened X97M/Squared.A is finding out whether there is the file nt².xls in the directory at which the variable Application.StartupPath is pointing. If that file does not exist the virus will create it upon finishing work with the infected document. Documents located in that directory are run always when Excel is executed.
The virus attacks the Excel Documents as they are opened. It attacks them by creating a new invisible worksheet with the name nt² which it inserts before all already existing ones and copies itself into it.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.