Macro.Word.Echo
Description Macro.Word.Echo
This is a polymorphic and stealth macro virus. It contains five macros in documents and seven in NORMAL.DOT:
Documents NORMAL.DOT
EchoOff EchoOff
CopyMacro CopyMacro
FileClose FileClose
Generation Generation
Trasher ToolsMacro, FileTemplates, ToolsCustomize
It replicates on closing documents and does not manifest itself in any way.
Check other viruses! Be aware! Use Antiviral Software
BAT.Tus.1680
Description BAT.Tus.1680
This is a relatively harmless memory resident polymorphic parasitic virus. It stores inside itself a COM dropper. After starting from a COM file, the virus keeps in memory its TRS copy and hooks INT 21h. The new handler INT 21h writes into BAT files that are opened. The virus does not manifest itself in any way.
BAT.Vr.718
Description BAT.Vr.718
It is a harmless nonmemory resident parasitic batch virus. It searches for BAT files, then writes itself to the end of the file and inserts in the beginning of file a jump command and label. When an infected file is executed, the virus gets control, infects other batch files, returns control the host file, and terminates.
Before infection After infection
+--------+ +--------+
| Host | | jump |-+
| file | |--------| |
| | +>| | |
| | | | | |
+--------+ | | | |
| |--------|<+
+-| Virus |-+
| | |
+--------+<+
The virus is named after the labels in its code - they begin with letters 'Vr'.
The virus does not manifest itself in any way.
|