Macro.Word97.Osm
Description Macro.Word97.Osm
This is a stealth companion macro virus. It contains two modules "NewMacros" and "dlgMyMacs". It does not infect the global macros area and documents in ordinary way. On document saving the virus copies infected template to the document's folder and attaches this template to the document. Next time this document is being opened, the infected template will be automatically loaded by MS Word.
On first run on the computer the virus also creates in MS Word startup folder the infected template Startup.dot. This template is automatically activated when MS Word starts.
Also only on first run the virus drops on the A: drive, and executes a Windows executable file that contains the "Back Orifice Trojan" which is additionally infected with "Win95.Marburg" virus. If there is no disk in drive A: MS Word can trap on incorrect operation.
The virus replaces standard ToolsMacros dialog box by its own empty one (stealth).
Check other viruses! Be aware! Use Antiviral Software
Spectral.601
Description Spectral.601
These are not dangerous encrypted parasitic viruses.
Spectral.601
It is a nonmemory resident virus. It searches for .COM files and writes itself to the end of the file. On 6th of any month it displays the message:
[CAUSTiC GRiP] By Spectral Shadow (c) 1994
Spectral.907
It is a memory resident virus. It hooks INT 21h and writes itself to the end of .COM files that are accessed. It contains and displays the text strings:
The Screeching Weasel is Installed.
By Spectral Shadow
Spellbound
Description Spellbound
It is not a dangerous nonmemory resident parasitic polymorphic virus. It searches for .COM files and writes itself to the beginning of the file. On 1st of any month it shifts the screen (on CGA and EGA monitors) and displays the message:
Prime Evil! (C) Spellbound, Line Noise 1992.
Coded in Stockholm, Sweden.
Please spell my name right!
|