Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

X97M/Squared.B

X97M/Squared.B A is a macro virus operating in the Microsoft Excel 97 environment. Module with the virus is named nt² and consists of two macros with names auto_open and SearchSelf. The module name contains HTML incompatible character which has ASCII code 178 and which is in HTML displayed as ². The character looks like a crosshatched rectangular.
After an infected document is opened X97M/Squared.A is finding out whether there is the file nt².xls in the directory at which the variable Application.StartupPath is pointing. If that file does not exist the virus will create it upon finishing work with the infected document. Documents located in that directory are run always when Excel is executed. Function of this virus is identical with function of the virus X97M/Squared.A.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.