Macro.Word.Appder.a
Description Macro.Word.Appder.a
This Word macro virus contains two original macros, but while infecting documents copies them to three macros:
NORMAL.DOT Infected files
Appder -> Appder, AutoOpen
AutoClose AutoClose
The virus infects the global macros area on AutoOpen and writes itself to documents on AutoClose. It also creates the "NTTHNTA=value" line in the "[Microsoft Word]" section in WINWORD6.INI file and increases this value while infecting any document. When this value reaches 20, the virus deletes the files:
C:DOC*.EXE
C:DOC*.COM
C:WINDOWS*.EXE
C:WINDOWSSYSTEM*.TTF
C:WINDOWSSYSTEM*.FOT
Check other viruses! Be aware! Use Antiviral Software
NightKnight
Description NightKnight
It is a dangerous memory resident parasitic stealth virus. It hooks INT 20h, 21h, 27h, 28h, 2Ah, 2Fh and writes itself to the end of COM and EXE files that are accessed. Depending on the system date it deletes the files instead of infecting them. It contains the text string:
Night Knight!
Nightmare.1024
Description Nightmare.1024
It is a very dangerous nonmemory resident parasitic virus. It searches for .COM files, then writes itself to the beginning of the file. While saving the original file beginning the virus encrypts it. The virus deletes the CHKLIST.MS file. On 18 of any month the virus erases FAT of the C: drive, decrypts and displays the message:
Nightmare Virus! Made in Argentina by D.M.
|