Macro.Word.Hikmat
Description Macro.Word.Hikmat
This is an encrypted macro virus. It contains two original macros that have different names in infected documents and NORMAL.DOT:
Documents NORMAL.DOT
AutoOpen FileSave
FileSaveAs FileSaveAs
The virus infects the system and documents on opening and saving files. It creates a new variable in infected documents:
Dzutaqshiri = (c)Hikmat Sudrajat, Bandung, April 1996
In some cases (on error while infecting a document?) it prints the message to the status line:
This command is not available because a document window is not active
Check other viruses! Be aware! Use Antiviral Software
Plague.2647y
Description Plague.2647y
It is a harmless memory resident stealth parasitic virus. It hooks INT 21h and writes itself to the end of COM, EXE and SYS files that are accessed. It contains the text string:
PLAGUE
Planters.360
Description Planters.360
It is a dangerous memory resident parasitic virus. It hooks INT 1Ch, 21h and overwrites .COM and .EXE files that are accessed with Get/Set File Attribute (AH=43h) DOS function (DOS command ATTRIB). Depending on its internal counter the virus decrypts and displays the message:
When you think of nuts,
you think of PLANTERS!
|