Macro.PPoint.ShapeMaster
Description Macro.PPoint.ShapeMaster
This macro virus infects the MS PowerPoint presentations. The virus contains one macro "actionhook" in the "ShapeMaster" module. The virus is activated on the MouseClick on the infected form, it then runs its installation routine and infects the PowerPoint installed on the computer. The virus then infects other presentations only when they are created.
While affecting the system the virus copies its code to the "Blank Presentation.pot" file in the Templates directory. This file is used as base while creating a new presentation. As a result the virus code is automatically copied to newly created presentations.
Depending on the system random counter the virus shows the previous slide of the infected presentation. Also depending on the random counter the virus displays the MessageBox:
PPT.ShapeMaster v0.1 /1nternal
Check other viruses! Be aware! Use Antiviral Software
MLTI.830.a
Description MLTI.830.a
This is a very dangerous memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of .COM files that are executed. On Fridays, some time after installation, the virus starts to delete files instead of executing them. The virus contains the text:
Hello! MLTI!
Eddie die somewhere in time! This programm was written in the
city of Prostokwashino (C) 1990 RED DIAVOLYATA
MMAND.2048
Description MMAND.2048
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files (except COMMAND.COM) that are executed. The virus contains the text string: "MMAND.COM", this is the only reason to name that virus.
|