Shizol.500
Description Shizol.500
It is a harmless memory resident parasitic virus. It copies itself into Interrupt Vectors Table, hooks INT 21h, then it writes itself to the end of .COM files that are executed. It contains the text string:
Shizol0.0
Check other viruses! Be aware! Use Antiviral Software
Macro.PPoint.ShapeMaster
Description Macro.PPoint.ShapeMaster
This macro virus infects the MS PowerPoint presentations. The virus contains one macro "actionhook" in the "ShapeMaster" module. The virus is activated on the MouseClick on the infected form, it then runs its installation routine and infects the PowerPoint installed on the computer. The virus then infects other presentations only when they are created.
While affecting the system the virus copies its code to the "Blank Presentation.pot" file in the Templates directory. This file is used as base while creating a new presentation. As a result the virus code is automatically copied to newly created presentations.
Depending on the system random counter the virus shows the previous slide of the infected presentation. Also depending on the random counter the virus displays the MessageBox:
PPT.ShapeMaster v0.1 /1nternal
Macro.PPoint.ShapeShift
Description Macro.PPoint.ShapeShift
This is the second known macro virus infecting MS PowerPoint presentations. It contains five macros in one module "ShapeShift": actionhook, SlideIn, WackShape, RandomWackSlide, WackPresentation.
To activate its code on a event the virus hooks MouseClick that pass control to the virus "actionhook" macro. This macro runs the infection routine: the virus affects all active presentations, then searches for presentation files in the current directory and subdirectories and infects them.
Depending on the system random counter the virus changes the active slide number. Also depending on the random counter the virus displays the MessageBox:
PPT.ShapeShift v0.1 /1nternal
|