VirDem.824
Description VirDem.824
This is a nonmemory resident parasitic virus. It writes itself to the beginning of COM files of the current or A: drives.
The virus displays the text:
Datum falsch
Bitte DATE aufrufen
Check other viruses! Be aware! Use Antiviral Software
Macro.Word97.Xute
Description Macro.Word97.Xute
The virus contains one macro "AutoClose" in module "Xute". It replicates on closing documents by exporting/importing its code through the C:XUTE.DAT file. On July 26th, or if the sum of the day and month numbers is equal to 30, the virus executes the file deleting command "DELTREE /Y *.*".
All text constants (export file name, DELTREE command etc.) are stored in the virus code in encrypted form. In case of need, the virus decrypts and uses them.
Macro.Word97.Zeitung.d
Description Macro.Word97.Zeitung.d
This macro virus infects Microsoft Word documents. It has comments at the beginning of macro:
'èó îäíÐììÄàîû ë åòèàè àåû"äêéîîüâðññçà îàî èâìäíéðçöèãçò Àñè ã"
'60
'awedft
The virus has no payload routine.
|