Mefl.625
Description Mefl.625
These are harmless memory resident parasitic viruses. They hook INT 21h and write themselves to the end of EXE files that are executed. The viruses do not manifest themselves in any way, they contain the text in cyrillic.
"Mefl.625": î¥öï
"Mefl.700": #1502 - î¥öï
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Johnny.a
Description Macro.Word.Johnny.a
This encrypted macro virus contains six macros, four of them are original ones, the other two are copies and they may have different names in NORMAL.DOT and infected documents:
NORMAL.DOT Infected file
Macro1 Presentv Presentv
AutoOpen
Macro2 Presentw Presentw
FileSaveAs
Macro3 Presentz Presentz
FileSave FileSave
Macro4 vGojohnny vGojohnny
The virus infects global macros area on AutoOpen and writes itself to documents on FileSave and FileSaveAs.
In some cases the virus creates new document and inserts the texts to there:
NAIPESVOH REHM
It then prints the message to status line:
Starting Autosave
The virus contains the commented line:
Our devise - A copy of "Go Johnny Go" on every computer !
Macro.Word.Joxzin
Description Macro.Word.Joxzin
This is a Word macro virus. It contains four macros in document: AutoClose, AutoOpen, NoMercyE, NoMercyI, and two more macros in NORMAL.DOT: FileTemplates, ToolsMacro (stealth).
The virus replicates itself when documents are opening or closing. It contains the set of instructions for both Italian and English Word. At the beginning of each macros there is the remark:
VirusName : WM. Joxzin
Author : Foxz [NoMercy]
Origin : Yogyakarta, Indonesia
WordVersion : Italian and English
Dedicated to: Italian and Indonesian Macro Viruses Creator
|