Virus Database

Macro.Word.DZT

Description Macro.Word.DZT

This is an encrypted macro virus. The existing copy of infected document contains only one macro FileSaveAs, but there are references to macros FileSave and AutoOpen - the virus copies FileSave from NORMAL.DOT to AutoOpen in documents, and AutoOpen from infected document to FileSave in NORMAL.DOT. It seems that this copy of the virus is either corrupted, or a "debug" version.
The virus inserts the text to the document's comments area:
DZT'96
(c)9 April 1996 by Hikmat S/D0E94328
comp. dept. of HFT
Instrumentasi Elektronika
MIPA Terapan Fakultas MIPA
Universitas Padjadjaran
Bandung

Check other viruses! Be aware! Use Antiviral Software

MG.a

Description MG.a

These are harmless memory resident parasitic viruses. They hook INT 13h, 21h. When DOS functions 36h,39h,47h,4Bh are executed, the viruses search for .COM files and write themselves to the end of the file.

Mgn.2048.a

Description Mgn.2048.a

These are harmless memory resident encrypted parasitic viruses. They were received from Magnitogorsk city (Russia). The viruses hook INT 8, 13h, 21h and write themselves to the end of COM and EXE files that are executed or closed, the COMMAND.COM file is infected by the algorithm of the "Lehigh" virus. The viruses disinfect the infected files that are opened, they also do not infect the files when the Num-Ins-Ctrl keys are pressed at the same time. Therefore the simplest way to cure a computer infected by such viruses is to process by any anti-virus program all COM and EXE files in all directories on all disks having Num-Ins-Ctrl pressed, and then to reboot the computer.
The viruses contain the string "COMMAND". "Mgn.2560.c" replaces the 50h disk type with the 51h in the Partition Table (these disk types are used by Disk Manager utility). "Mgn.2048" hourly "overturn" the screen. "Mgn.2048.b" contains the text:
Shadow & Safe

"Mgn.2560.a,b,c" periodically display:
+--------------------------------------+
ƒ Mr. Lozinsky ! ƒ
ƒ Just read documentation on your ƒ
ƒ AIDSTEST (1-Oct-90 version) we ƒ
ƒ release new virus. Create improved ƒ
ƒ versions of AIDSTEST, please ! ƒ
ƒ(C) TinySoft&Electronics,Inc. 3-Nov-90ƒ
+--------------------------------------+

"Mgn.3000" sets the screen colors to white/blue/red (the colors of Russian national flag).

Home