Macro.Word.Cap
Description Macro.Word.Cap
CAP - infection routine AutoExec - calls the infection routine AutoOpen - - // - FileOpen - - // - FileSave - - // - AutoClose - - // - FileClose - - // - FileSaveAs - - // - ToolsMacro - hides all macros ("stealth" routine) FileTemplates - - // -
The virus not only disables ToolsMacro and FileTemplates menus, but also deletes the references to them in the File and Tools main menus. The virus also disables auto-macros. As a result it is not possible to disinfect this virus by using Word functions -it is not possible to delete macro viruses by creating new or running existing virus removing macros.
The virus emulates "FileSaveAs" while saving infected documents -and writes an empty document to disk.
The virus contains the following strings (comments):
C.A.P: Un virus social.. y ahora digital..
"j4cKy Qw3rTy" (jqw3rty@hotmail.com).
Venezuela, Maracay, Dic 1996.
P.D. Que haces gochito ? Nunca seras Simon Bolivar.. Bolsa !
Check other viruses! Be aware! Use Antiviral Software
Algerian.1400
Description Algerian.1400
It is not a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed. Depending on the system date and time the virus displays the message:
all..T h e A l g e r i a n V i r u s.....
Version 1.00 , 1993
by
Ahmet Cezayirli
Istanbul University
Electronics Engineering
Alho.676
Description Alho.676
It is a very dangerous nonmemory resident parasitic virus. It searches for .COM files, then writes itself to the end of the file. Depending on DOS version installed, its counters and other conditions the virus erases the disk sectors. Depending on its counters the virus leaves a memory resident program that hooks INT 9 and when Alt, Ctrl or Shift key is pressed, that program displays the message:
+---------------------------+
¦ CTRL,SHIFT & ALT keys are ¦
¦ reserved for internal use ¦
+---------------------------+
The virus also contains the text strings:
*.Com
Alho
|