Macro.Word97.Komcon
Description Macro.Word97.Komcon
The virus for Word 97 contains 2 macros in 2 modules, both modules and macros have the same names. This virus was converted from its Word6/7 prototype, and as well as original virus it infects the global macros area (NORMAL.DOT) on AutoOpen call and writes itself to the documents on AutoClose call. The virus does not a manifest itself in any way.
Check other viruses! Be aware! Use Antiviral Software
Mithrandir Family
Description Mithrandir Family
These are harmless memory resident viruses. They hook INT 21h and infect the files that are executed.
Mithrandir.447,450,496
These are companion viruses. While executing .EXE files they create the companion .COM files with the same name. These infectors contain the text string:
Mithrandir III
"Mithrandir.496" contains also the string:
DeMoRaLiZeD YoUtH
Mithrandir.696
It is a parasitic virus. It writes itself into the middle of COM files. It contains the strings:
Mithrandir
DeMoRaLiZeD YoUtH
Mity.1982
Description Mity.1982
It is not a dangerous memory resident multipartite virus. When an infected file is executed, the virus writes its code to the last sectors of C: drive and modifies the disk partition table in such way, that active boot sector address points to the virus code (see "Starship" virus). The virus then returns to the host program.
While booting from infected disk the virus hooks INT 13h, waits for DOS loading process, hooks INT 21h and then infects COM and EXE files that are executed. The virus writes itself to the beginning of COM file and to the middle of EXE files.
Depending on its counters the virus displays the text:
XXXX XXXX XXXXXXXX XXXXXXXXXX XXX XXX
XXXXXX XXXXXX XXXXXXXX XXXXXXXXXX XXXXX XXXXX
XXXXXXXXXXXXXXX XXXX XXXX XXXXXXXXX
XXXX XXX XXXX XXXX XXXX XXXX
XXXX XXXX XXXX XXXX XXXXX
XXXX XXXX XXXX XXXX XXXXX
|