Spartak_II.2000
Description Spartak_II.2000
It is not a dangerous nonmemory resident polymorphic companion virus. It searches for .COM and .EXE files, then renames .COM files to .CCC and .EXE files to .EEE, then writes itself instead of host file. After infection the virus creates in the current directory the SPARTAK.BAT file and writes to there the commands that disinfect all files in the current directory:
copy *.ccc *.com
copy *.eee *.exe
if -%1 == - goto end
del *.eee
del *.ccc
:end
In case of error, or if there more than 16 files infected the virus manifests itself by a effect: beeps and displays the picture:
xx
xx xx
xx xx
xx xxxx
xx xxxxxxXxxx xx
X X xx X
xx xxxXxxxxxx xx
xxxx xx
xx xx
xx xx
xx
Check other viruses! Be aware! Use Antiviral Software
Macro.Word97.Apmrs
Description Macro.Word97.Apmrs
This is a polymorphic macro virus. It infects Word97 documents. It contains only one macro: AdvancedPolymorphicMacroReplicationSystem.
Macro.Word97.Argh
Description Macro.Word97.Argh
The virus code contains fifteen macros in one module "NewMacroses". The virus spreads on creating, opening, closing documents as well as on exiting Microsoft Word. On infecting the system the virus copies original NORMAL.DOT to user template directory with the WINDOT.DLL name, and infected NORMAL.DOT with the WININF.DLL name.
On selecting the ToolsMacro menu the virus checks the number of opened documents. If no documents are opened, the virus displays the message:
Microsoft is protecting your normal.dot from virus infection You can
only add macros to other documents
Otherwise the virus removes itself from normal template and on leaving the ToolsMacro dialog window reinfects it.
While infecting the virus with probability 2% displays the assistants balloon:
Help me
I'm not feeling very vell .. AAARGHH!!!
|