Macro.Word.EMT
Description Macro.Word.EMT
This is an encrypted Word macro virus. It contains one macro named AutoOpen in documents and AutoClose in NORMAL.DOT.
It infects the global macro area on opening an infected document, and other documents when they are closed. Depending on the random counter the virus displays the MessageBox:
EMT97
Check other viruses! Be aware! Use Antiviral Software
Nie.1664
Description Nie.1664
It is a dangerous nonmemory resident parasitic virus. It searches for COM files and writes itself to the end of the file. While infecting this virus uses FCB functions to open/read/write/close the file. After infection this virus hooks INT 1Ch and leaves a memory resident program. That program checks the keyboard codes that are entered, and in some cases reboots the computer.
This virus contains the text strings, the first one is not encrypted, other strings are encrypted ones:
Nie znaleziono pliku lub zla sciezka dostepu!
Copyright by Krzysztof Jankowski.
WARSZAWA 1993.
All rights reserved.
Printed in Poland.
Nigeb.890
Description Nigeb.890
It is a dangerous memory resident encrypted parasitic virus. It hooks INT 1Ch, 21h and writes itself to the end of COM files that are executed.
While writing to the files (INT 21h, AH=40h) the virus converts the strings "BEGIN" (lower or upper-cased) to "NIGEB". On INT 1Ch (timer) calls it scans the screen for "NIGEB" strings, and converts them to "BEGIN".
The virus contains the text strings:
igeb
egin
AntiPascal-1 (C)Godzilla Corp.
|