Anti virus software
Download free anti virus software Anti virus software information Order anti virus software (US$ 29.95)
Protector Plus
Anti virus software for

 
Windows
 
(XP, 2000, 2003, NT, Me, 98, 95)

 Exchange
 
 
NetWare












Download Antivirus software

Triplicate Virus

Information about the Triplicate Virus:

This virus infects Word 97 documents NORMAL.DOT file of Word 97 and Word 2000. Through Word97 it infects Excel spread sheets and PowerPoint files.

When the infected file is opened under Word 97 it disables Macro virus protection of the MSWord, after this it will infect NORMAL.DOT which is a global template there by it transfers virus code in to that. Virus removes all the macros from the global template and inserts a procedure DisableAV(). This procedure carries code which disables Macro virus protection of Excel and Power Point in the registry.

Virus will invoke MS Excel and creates a file called BOOK1.XLS under Excel startup directory. If the file BOOK1.XLS is already present then it would not infect Excel. In the last virus will launch Power Point and searches for a module called Triplicate, if this module does not exists then it will insert a shape in the first slide Blank Presentation which is under template directory.

The infected file carries the following text which is visible in all the infected documents:

<!--1nternal--> Triplicate v0.1 /1nternal

Triplicate virus first appeared in May 1999 and it is in the wild.

 Variants of triplicate virus :

 Triplicate B:

This variant almost same as Triplicate. There is some minor bug fix in the virus code and the text in the infected document has been changed to:

"Triplilcate.b": <!--1nternal--> Triplicate v0.11 /1nternal

 Triplicate C:

This variant almost same as Triplicate. There is some minor modifications in the virus code and the text in the infected document has been changed to:

"Triplilcate.c": <!--1nternal--> Triplicate v0.2 /1nternal

 Triplicate D:

This variant almost same as Triplicate. There is some minor modifications in the virus code and the text in the infected document has been changed to:

"Triplilcate.d": <!--1nternal--> Triplicate v0.21 /1nternal

Other names of triplicate virus :

This worm is also known as W97M/Tristate.

Removing triplicate virus from your computer:

You can remove this virus from your computer by using Protector Plus antivirus software.

Click here to download a 30 day Evaluation Copy of
Protector Plus anti virus for your operating system

About Protector Plus Anti virus Software Packages:

Proland Software is the developer of Protector Plus range of anti virus software packages. Protector Plus anti virus is available for Windows XP, Windows Me/98/95, Windows NT/2000/2003 servers and workstations, MS-Exchange 2000/2003, MS-DOS and NetWare servers.

Protector Plus range of anti virus products offer on-line virus detection and removal. All the packages have the ability to detect and isolate all types of viruses, trojans, worms and other types of malware. Protector Plus antivirus software can detect and remove triplicate virus reliably.

These products are updated on a continuous basis and the latest upgrades for all the platforms are made available for downloading from this site.

You can download the 30 day evaluation copy of
Protector Plus anti virus software free of cost for these platforms:

Windows | Exchange | NetWare

Download free anti virus software | Anti virus software information | Order anti virus software

Copyright © 2004 Proland Software. All rights reserved.


Download Antivirus software