Macro.Word97.Flop
Description Macro.Word97.Flop
This macro virus infects MS Word documents, disables MS Word macro virus protection and hides some controls on command bars. There is a comment line in virus body:
'VBACopyFloppy
The virus has payload routine that checks placement of recently opened document and if it is placed on removable disk (floppy disk), then the routine copies all files from this disk into temporary directory on local hard drive.
Check other viruses! Be aware! Use Antiviral Software
ChDir.422
Description ChDir.422
These are memory resident dangerous viruses. They hook INT 21h and on calls to ChangeDir (AH=3Bh) DOS function they search for .COM- and .EXE-files and overwrite block of code in the file middle. The infected files are not recoverable.
Cheap.828
Description Cheap.828
It is not a dangerous nonmemory resident encrypted parasitic virus. It searches for COM and EXE files, then writes itself to the end of the file. On 4th, 12th, 17th and 25th of any month it 500 times displays the text:
ChEaPeXe v2.0 Virus
by Wâr läDÉ '97 USA
Then all next "generations" of this virus display these messages on any execution - not depending on the system date (bug in the virus?).
|