Virus Database

Macro.Word.Printer

Description Macro.Word.Printer

This is an encrypted Word macro virus. It contains 5 macros in documents and 10 in NORMAL.DOT:
Documents NORMAL.DOT
LPT1 FileOpen, LPT1
LPT2 FilePrint, LPT2
Canon FileSaveAs, Canon
Epson Epson, FileTemplates, ToolsMacro
AutoOpen AutoOpen

The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved with new name (FileSaveAs).
On entering the Tools/Macro the virus displays the MessageBox:
Weeee Weeee

On printing documents the virus writes to the status line the message and draws it to right:
Know what Dwira Oktorianto is, before it is too late

Check other viruses! Be aware! Use Antiviral Software

Mef.1481

Description Mef.1481

These are a harmless memory resident encrypted parasitic viruses. They hook INT 21h and writes themselves to the end of COM- and EXE-files that are executed or opened. The viruses check the file names and do not infect the files: AVG.*, ASTA*.*, STRO*.*, DPMI*.*, RTM.*, SCAN*.*.
The viruses use anti-debugger tricks, and under debugger they switch to search-and-infect routine that search for COM- and EXE-files in DOS or C:DOS directories, and infects them.
The virus contains the internal text strings:
*.exe *.com dos
AVG.ASTASTRODPMIRTM.SCAN
COMEXE

Mefl.625

Description Mefl.625

These are harmless memory resident parasitic viruses. They hook INT 21h and write themselves to the end of EXE files that are executed. The viruses do not manifest themselves in any way, they contain the text in cyrillic.
"Mefl.625": î¥öï
"Mefl.700": #1502 - î¥öï

Home