Kaos4.697
Description Kaos4.697
It is a harmless nonmemory resident parasitic virus. It searches for COM and EXE files and writes itself to the end of the file. It contains the text string:
KAOS4 / Köhntark
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Hikmat
Description Macro.Word.Hikmat
This is an encrypted macro virus. It contains two original macros that have different names in infected documents and NORMAL.DOT:
Documents NORMAL.DOT
AutoOpen FileSave
FileSaveAs FileSaveAs
The virus infects the system and documents on opening and saving files. It creates a new variable in infected documents:
Dzutaqshiri = (c)Hikmat Sudrajat, Bandung, April 1996
In some cases (on error while infecting a document?) it prints the message to the status line:
This command is not available because a document window is not active
Macro.Word.Hilight
Description Macro.Word.Hilight
This is an encrypted macro virus. It contains two macros that have different names in documents and NORMAL.DOT:
Documents NORMAL.DOT
AutoOpen AutoExec
PrezentIt FileSaveAs
The virus infects the system on AutoOpen call and writes itself to documents on FileSaveAs call. The virus creates a counter in system profiles (WIN.INI) file:
[WINDOWS]
Count=0
The virus increases this counter on each AutoExec, and when the counter reaches 10, the virus changes the Windows palette colors.
|