









 | Beast Virus| Name | Beast Virus | | Aliases | Beast,Win95/Beast, TROJ_W97M_BEAST, 3BEPb, Beast.a | | Discovered on | May 1999 |
Virus Information - Beast Virus:
This virus infects Word 97 and Word 2000
documents. The virus code is contained in one macro named "AUTOOPEN".
This macro will be in the "ThisDocument" module of the infected
file. This virus also carries an embedded object called i.exe, which is
a PE executable file. When an infected document is opened it runs embedded
i.exe file, which installs itself under WINDOWS\SYSTEM directory. It selects
a random name from the list of DLL files from the same directory, with
an EXE extension. The program goes memory resident during the next boot up
and infects documents used under Word 97.

|