Bug.920
Description Bug.920
These are not dangerous parasitic and companion viruses. During execution they search for .EXE-files and create companion .COM-files. Then they search for .COM-files (including COMMAND.COM) and write themselves at their ends. As the result the companion files are infected twice.
"Bug.920" is not memory resident virus, "Bug.1497" hooks INT 21h and infects files that are executed.
The viruses delete CHKLIST file. Depending on the system date they change the font of a random selected letter to "bug" image. The viruses contain the internal text strings:
*.com *.exe c:chklist.* c:command.com
and:
"Bug.920": BUG-2.0
Check other viruses! Be aware! Use Antiviral Software
Macro.Word97.Minimal
Description Macro.Word97.Minimal
This is a silly Word97 macro virus. It contains only one macro "autoopen". It infects the system on opening an infected file and writes itself to the documents on opening them.
The virus contains the commented string:
Vesselin Bontchev
Macro.Word97.Model
Description Macro.Word97.Model
The virus code contains five macros in one module "Code": AutoOpen, AutoNew, CopyVirCodeToModel, CopyVirCodeToDocument, RemoveProtection.
On opening an infected document the virus infects the global macros area. The virus infects documents on their creating or saving. The virus does not manifest itself in any way.
|