Macro.PPoint.ShapeMaster
Description Macro.PPoint.ShapeMaster
This macro virus infects the MS PowerPoint presentations. The virus contains one macro "actionhook" in the "ShapeMaster" module. The virus is activated on the MouseClick on the infected form, it then runs its installation routine and infects the PowerPoint installed on the computer. The virus then infects other presentations only when they are created.
While affecting the system the virus copies its code to the "Blank Presentation.pot" file in the Templates directory. This file is used as base while creating a new presentation. As a result the virus code is automatically copied to newly created presentations.
Depending on the system random counter the virus shows the previous slide of the infected presentation. Also depending on the random counter the virus displays the MessageBox:
PPT.ShapeMaster v0.1 /1nternal
Check other viruses! Be aware! Use Antiviral Software
DeadBoot.446
Description DeadBoot.446
This is a very dangerous memory resident encrypted multipartite virus. It infects the MBR of the hard drive and overwrites boot sector on floppy disks as well as headers of EXE files that are copied to floppy disks. The virus encrypts the directories sectors on the hard drive, as a result after disinfection they stay not accessible. To detect its TSR copy the virus uses INT 13h call with AX=DEADh.
DeadHead.992
Description DeadHead.992
It is a dangerous nonmemory resident encrypted parasitic virus. It searches for .COM files, then writes itself to the beginning of the file. The virus has bugs and often halts the system instead of infection. Depending on its data the virus corrupts the boot sector of the C: drive and displays the message:
[XtZ] by dEAdhEAd (StupidVir).
In case of error while infecting a file the virus displays the message and returns to DOS:
Incorrect D0S version
|