Trojan.Macro.Word.Nikita
Description Trojan.Macro.Word.Nikita
This is a Word macro trojan. It contains two macros: AutoOpen and Fun. The trojanized document inside contains the text "Hello Guys! Oh, please stay here and look!" and the image of a face. While opening that document the virus copies its "Fun" macro to global macro area by name "AutoOpen", then it maximizes the face and draws it. On loading with infected NORMAL.DOT the virus fills the current directory with random named files containing the text:
Nikita (1997) Nightmare Joker [SLAM]
Check other viruses! Be aware! Use Antiviral Software
Shizol.500
Description Shizol.500
It is a harmless memory resident parasitic virus. It copies itself into Interrupt Vectors Table, hooks INT 21h, then it writes itself to the end of .COM files that are executed. It contains the text string:
Shizol0.0
Shoe.1904
Description Shoe.1904
It is a very dangerous memory resident polymorphic parasitic virus. It copies itself to UMB, if there is a free block, or to the conventional memory, hooks INT 8, 21h and writes itself to the end of EXE files that are accessed. On 1st of any even month (February, April, all) the virus erases the disk sectors and displays the message:
OOPS .. Sorry
For help call now:
555-SHOE or
555-RGNE
No rights reserved by M.WEINHOLD
|