Macro.Office.Hopper
Description Macro.Office.Hopper
These are multi-platform macro-viruses infecting Office97 components: Word documents and Excel sheets. The viruses contain two auto-macros in Excel sheets and Word documents: Document_Close and Workbook_Deactivate.
The viruses replicate themselves in Excel upon deactivating workbooks. In Word, the viruses replicate upon document closing. The minor virus version spreads only from Excel to Word and not back, and the major virus version migrates from Word to Excel and back with no problems.
The viruses turn off the VirusProtection MS Office option. Depending on the version, the viruses contain the the following text comments or display them in MessageBox:
Ex-cell v0.1 /1nternal
Cross.BadSeed v0.1 /1nternal
Cross.BadSeed v0.2 /1nternal
Cross.BadSeed v0.3 /1nternal
Cross.BadSeed v0.4 /1nternal
Check other viruses! Be aware! Use Antiviral Software
Flash Family
Description Flash Family
This is a family of non dangerous memory-resident viruses that write themselves into .COM- and .EXE-files as these files are started. The "Flash" viruses make some video effects only on the CGA adapter. They hook INT 8, 21h.
Flat.1000.a
Description Flat.1000.a
This is a harmless, memory-resident encrypted parasitic virus. It hooks INT 21h, and writes itself to the start of COM files that are executed. The virus contains eight subroutines. It moves their places upon each installation in memory. The virus stores new subroutine addresses in its table, and restores the original INT 21h address after infecting ten files. The virus contains the following text strings:
You have a flat tire, mate!
|