F-Secure Virus Descriptions : Footer

NAME:	Footer
ALIAS:	Footnote

This is a simple Word macro virus.

VARIANT: Footer.A

While spreading, Footer.A creates these two files:

        c:\footprint.$$$
        c:\footprint.$$1

The virus activates by overwriting the footer area in opened documents.

W97M/Footer was found in the wild in February 1999.

VARIANT: Footer.S

This is a minor variant of Footer.A that is functionally identical with it.

[Analysis: Katrin Tocheva, F-Secure, February 1999 - September 2000]