Macro.Word.ZMB
Description Macro.Word.ZMB
This is a German Word macro virus. It contains four macros: AutoOpen (NORMAL.DOT - ZMB), ExtrasMakro, DateiDrucken, DateiSpeichern.
The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved (DateiSpeichern).
This is stealth virus: it replaces Extras/Makro (Tools/Macro) menu with another one. Depending on the system random counter the virus replaces the words while printing documents.
On March 31st it erases the CONFIG.SYS, AUTOEXEC.BAT files and displays the MessageBox:
Osterhasenpolizei
Hallihalloall.
Ich bin der Osterhase und sage Dir, dax man
an Ostern keinen Computer benutzen soll !!
Check other viruses! Be aware! Use Antiviral Software
Dec3rd.1333
Description Dec3rd.1333
It's a not dangerous memory resident parasitic encrypted virus. It hooks INT 21h and writes itself to the end of COM- and EXE-files that are executed or opened, or searches for these files and infects them (this virus contains the internal mask strings "*.COM *.EXE"). On running under DOS 6.0 and some other this virus displays: "Dec 3 92 is my 20th birthday (V6)".
December12.1914
Description December12.1914
It is not a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. On December 12th it also hooks INT 1Ch (timer) and in about 30 minutes drops symbols on the screen (see also the "Cascade" virus).
|