Macro.Word.Gest
Description Macro.Word.Gest
This is an encrypted macro virus. It contains two macros: AutoOpen and AutoClose. The virus infects the global macros area on opening an infected document and infects documents when they are opened or closed.
The virus creates the [Gest] section in the WIN.INI file and writes the "date" string to there. This string contains the date of infection. In 40 days the virus writes to the AUTOEXEC.BAT file the command that erases all files on the C: drive:
@deltree c:*>nul
Check other viruses! Be aware! Use Antiviral Software
MSU4.2000
Description MSU4.2000
It is a dangerous memory resident polymorphic parasitic virus. It hooks INT 21h and writes itself to the beginning of COM (except COMMAND.COM) and EXE files that are executed or opened. It has the bug and halts the system while infecting EXE files. On infecting the virus creates the temporary file DOC_MOC.MOC, writes the virus into there, appends the file, and rename the DOC_MOC.MOC file to the name of that file. The virus contains the text string:
MSU 4 113 P.D. 1994
Mte-Small Family
Description Mte-Small Family
These are not dangerous memory resident polymorphic parasitic viruses. They hook INT 21h and write themselves to the beginning of COM and EXE files that are executed. They display the message and halt PC:
"Mte-Small.Mega":
FORMULA 1: I love this competition. Coulthard will be the winner.
"Mte-Small.Sepultura":
Virus is dedicated
in memory of my friend Igor.
CHAOS A.D.
The viruses also contain the text strings:
"Mte-Small.Mega":
MEGADETH
MtE-small by Keith Timmons.
MetallicA
"Mte-Small.Sepultura":
Shurick's MtE-small
SEPULTURA
|