BEAST VIRUS

Information about the Beast virus:

This virus infects Word 97 and Word 2000 documents. The virus code is contained in one macro named "AUTOOPEN". This macro will be in the "ThisDocument" module of the infected file. This virus also carries an embedded object called i.exe, which is a PE executable file. When an infected document is opened it runs embedded i.exe file, which installs itself under WINDOWS\SYSTEM directory. It selects a random name from the list of DLL files from the same directory, with an EXE extension. The program goes memory resident during the next boot up and infects documents used under Word 97.

Beast virus first appeared in May 1999.


Other names of Beast virus:
This virus is also known as Win95/Beast, TROJ_W97M_BEAST, 3BEPb, Beast.a.