Malware type: Macro

Aliases: Virus.MSExcel.Phoneman.b (Kaspersky), X97M/Generic (McAfee), X97M.Phoneman (Symantec), X2000M/Phone.B (Avira), XM97/Phone-B (Sophos), Virus:X97M/Phone.B (Microsoft)

In the wild: No

Destructive: No

Language: English

Platform: Microsoft Excel 97, 2000, XP

Encrypted: No

Description: 

This macro virus infects Microsoft Excel workbooks once they are closed or saved. It drops an infected workbook in Microsoft Excel's default startup path so that it automatically executes when Excel is started.

It changes the Comments property of Excel workbooks and hides the program's application window if the user is trying to print a workbook when the current time is above 8:00 pm.

It runs on Microsoft Excel 97, 2000 and XP.

For additional information about this threat, see:
Solution
Technical Details

Description created: Aug. 20, 2003 10:05:01 AM GMT -0800
Description updated: Aug. 20, 2003 11:06:33 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.