Macro.Word.Anti-IVX
Description Macro.Word.Anti-IVX
It is not a dangerous semi-polymorphic macro virus. In infected documents it contains one macro AutoOpen that infects global macros area while opening an infected document. In infected NORMAL.DOT in contains two macros. The first macro is a copy of AutoOpen macro and has a random selected name. The second macro has the name FileSaveAs and infects documents that are saved with new name.
The virus is semi-polymorphic - while copying its AutoOpen macro it renames its internal values to other names, generates random name for copy of AutoOpen macro. While creating FileSaveAs macro the virus inserts commands that are selected from several variants and inserts random selected comments.
While infecting global macros area the virus creates the IVX.NOT file in the directory of the host file and writes the text to there:
IVX detects all macro viruses, past, present, and future.
It adds the command to the C:AUTOEXEC.BAT file that clears the Read-Only attribute of NORMAL.DOT file:
@ATTRIB -R WordDirectoryNORMAL.DOT > NUL"
Check other viruses! Be aware! Use Antiviral Software
Acvt.1243
Description Acvt.1243
It's a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself at the end of .COM-files that are executed or loaded as overlays. It contains code which is not used. Infected files contain the counter that is decreased on every infection attempt of this file. On the 100th attempt the virus erases some system information on hard drive. The virus contains the internal text strings:
acvt
no $yes$*.* $%COMEXEDBF
AD.132
Description AD.132
This is harmless nonmemory resident parasitic virus. It searches for COM files in the current directory, then writes itself to the end of the file. The virus contains the ID-byte ADh.
|