Macro.Word.Cheat
Description Macro.Word.Cheat
This is an extremely short and primitive macro virus. It contains only one macro AutoOpen and replicates itself on opening documents. It does not manifest itself in any way.
Check other viruses! Be aware! Use Antiviral Software
Gvirus.653
Description Gvirus.653
It's a not dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the ends of the .COM-files that are executed. The virus contains the string "COMMAND.COM" and infects this file on installation. After one month of infection the file displays: "Schon mal was von G-Virus gehört ?". It also contains the internal text string: "G-VIRUS V1.2".
GW.1201
Description GW.1201
It is a harmless memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or closed. The virus checks file names and does not infect anti-virus programs and files with the names: AIDSTEST, DRWEB, COMMAND, IBM*, AVP.
While infecting the virus uses undocumented System File Tables. The virus also uses other tricks to hide itself in the memory and access system resources: it traces INT 13h to get original INT 13h handler and patches DOS kernel to intercept file accessing calls.
The virus is encrypted in files as well as in the system memory. When needed the virus decrypts routines, executes them and then encrypts.
The virus does not manifest itself in any way. At the beginning of its code it contains a set of instructions that looks like text string:
_GW
|