Macro.Word97.Swatch.b
Description Macro.Word97.Swatch.b
Swatch.b is a Word97 macro virus. It contains three macros: AutoOpen,RepToDocs, RepToNormal.
There is also a macro FileSave present, but not with the given version. When an infected file is opened, the virus creates a temporary archive named
Tmp.bas
in the C: drive root directory where its code is written. After this it imports a temporary file into normal.dot, thus allowing other MS Word files to become infected. Oncethe current document is infected the virus proceeds to delete the Tmp.bas file from the disk.
In general this virus does not contain any destructive functions.
Check other viruses! Be aware! Use Antiviral Software
Tabulero Family
Description Tabulero Family
These are not dangerous memory resident parasitic viruses. They hook INT 9, 21h and write themselves to the end of EXE files that are executed or loaded into the memory as overlays. The viruses display:
TABULERO
They also contain the text strings:
"Tabulero.2048.a": IUPLCM Wilmer
"Tabulero.2048.a": ODALUBAT atse CP us, otreum ah LEMRAC
--IUP LUIS CABALLERO MEJIAS--Wilmer 86-
ISRAEL
Tack Family
Description Tack Family
These are dangerous nonmemory resident parasitic viruses. They search for .COM files of the current directory and write themselves to the end of the file. The viruses infect the files in incorrect way: they overwrite first six bytes of the file beginning with Jmp-Virus instructions (MOV AX,offset Virus / JMP AX), but before return to the host program the viruses restore only five bytes of the code. These viruses display the message:
----------------- Hello, I am virus ! ------------
"Tack.449" contains the word "TACK".
|