Babec.a
Description Babec.a
This is a relatively harmless memory resident boot virus. It hooks INT 16h and 21h, and writes itself to the BOOT sectors of floppy disks and to the MBR sector of the hard drive. Upon loading from a BOOT sector, the virus writes itself to the MBR sector. It writes itself to the BOOT sectors upon setting up a default disk by a DOS function. The virus does not manifest itself in any way.
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Date
Description Macro.Word.Date
This macro virus was written in Italy. It contains the automatic macro AutoOpen, by which it infects documents and the NORMAL.DOT template. The macro AutoOpen is encrypted (i.e. it is not directly modifiable). Besides the Main subroutine - inside macros it is present on default - the virus contains two other subroutines:
Infezione (Infection)
Effetti (Payload)
Before running the "Infezione" and "Effetti" subroutines, Word.Macro.Date checks the system date. If the year is < 1997 and month is < 6, the virus runs the infection routines, otherwise it aborts its operations.
Word.Macro.Date seems to work correctly also on the English version of Word.
The "Effetti" routine tries to delete the macro AutoClose from templates (disinfects "Divina" macro virus?).
Macro.Word.Dave
Description Macro.Word.Dave
This is a silly encrypted macro virus. It contains only one macro AutoOpen and infects documents that are opened and copies itself to global macros area on opening an infected document. The virus creates the "Virus" section in system profiles (WIN.INI file) and writes the text "Name=Dave" to there. After infecting the virus moves the text "Daveall" on the status line.
|