Macro.Word97.Titch
Description Macro.Word97.Titch
This virus contains only one macro AutoClose and replicate themselves on document closing. It contain the comments:
Titch
An experiment in Macro programming ;)
Minimum stealth, no encryption, No payload, No mail replication
If you had looked you could have found and deleted it but..
You probably never knew it was here!
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Newyear
Description Macro.Word.Newyear
This is encrypted macro virus. It contains three macros: AutoOpen, FichierEnregistrer, FichierEnregistrerSous. The virus infects the global macros area and documents on AutoOpen. On saving documents with new name it displays the MessageBox:
Une erreur syst me emp che temporairement Word d'afficher la boite
Enregistrer sous
Since 15 of January the virus sets the password "JOKE98" on documents that are saved.
Macro.Word.NF
Description Macro.Word.NF
It is an extremely silly encrypted virus containing nothing except infection routines. Summary length of its two macros (nf, autoclose) is just 286 bytes.
Both virus macros contains infection routines. First macro infects global area while closing an infected document (it is named "autoclose" in infected documents and "nf" in NORMAL.DOT), second macro infects documents that are closed (it is named "nf" in infected documents and "autoclose" in NORMAL.DOT). So the virus exchanges names of these macros as several macro viruses do - while infecting a file or global area it copies "nf" macro with name "autoclose", and "autoclose" with name "nf".
NORMAL.DOT Infected files
Macro1 nf autoclose
Macro1 autoclose nf
While infecting the system the virus displays the string "Infected!", while infecting a file the virus displays "Traced!".
|