Macro.Word97.Mxfiles
Description Macro.Word97.Mxfiles
These macro viruses have simple infection mechanism that infects MS Word documents and Normal template.Depending on version virus contain different payload procedures. Most of versions just insert string in the beginning of document. Strings are mostly unreadable (Japanese hieroglyphs?) and looks like this:
åÐÇ ÇáÝíÑæÓ ÚÑÖ æÛíÑ ÖÇÑ æßá ãÇíÞæã Èå ßÊÇÈå ÚÈÇÑÉ ßáäÇ äÈÇíÚ ãÈÇÑß
or
ßáäÇ äÈÇíÚ ãÈÇÑß
Some virus versions also using font animation as visual effect for inserted string.
Check other viruses! Be aware! Use Antiviral Software
Naive.1647
Description Naive.1647
It is not a dangerous memory resident parasitic virus. It hooks INT 9, 21h and writes itself to the end of EXE-files that are executed or opened. If Alt-Ctrl-Del keys are pressed (warm reboot) the virus tries to display the message in Russian, but fails. The virus contains the text string:
NAIVE
Naka.509
Description Naka.509
It is not a dangerous nonmemory resident parasitic virus. It searches for .EXE files in the current directory, then writes itself to the end of the file. Depending on the system date the virus manifests itself in different ways.
On March 14 it displays the text "Birthday", beeps by the PC speaker and halts the system. On each 4th day starting from 3rd (3,7,11,15,etc) the virus writes the byte A4h to the CMOS memory at the address 40h (depending on different types of BIOS this byte has different means). On any day, in case the system date year is not 1999, the virus displays the text "Naka_007". The virus contains the text string:
Sebastopol IVS007
|