VD.568
Description VD.568
It is not a dangerous nonmemory resident encrypted parasitic virus. It searches for .COM files and writes itself to the end of the file. It contains ID-word "VD". Depending on the infected file length it displays the message:
[2J [10;25H [5;33m--- Be careful VIRUS !! ---
Check other viruses! Be aware! Use Antiviral Software
Macro.Word97.Badmacro.a
Description Macro.Word97.Badmacro.a
This virus contains two macros AutoOpen and AutoClose, and replicates upon document opening or closing. Upon closing a document, starting from the 23rd of any month, the virus creates and executes the "C:QSTART.COM" Trojan file clearing the CMOS memory. The virus has Russian origin: on the 1st and 13th of any month, it replaces, in the current document, the Russian words "here" with "there". The virus also sets the description attributes for its macros:
AutoOpen: Absolutely bad macro (in Russian)
AutoClose: Reread Version 1.2!
Macro.Word97.Bawl
Description Macro.Word97.Bawl
This is a Word97 macro virus. It contains one macro AutoOpen and replicates on opening documents. The virus code was written for Word6/7 and then converted to Word97. As a result the virus has errors. The virus sets the Subject for documents while infecting them:
Green Bay Packers - - Super Bowl XXXI Champions
|