|
|
Macro.Word97.Antise Viruses Information
| Name: |
Macro.Word97.Antise |
| Category: |
Viruses |
| Description:
|
Details
Macro.Word97.Antisec
This macro virus infects MS Word documents and normal.dot template files. The virus itself is a macro named 'AntiTheSecond' and it seems that the author intended it to act as an antivirus against the macro virus TheSecond.
When an infected file or template is opened, the virus creates an export file named Anti.tmp in the MS Word start directory. The macro code is saved in this file. The virus then checks all MS Word documents which are currently open for the macro module of TheSecond virus. If this module is detected, the virus will cause a MessageBox to be displayed. The MessageBox contains the following text in Russian:
Обнаружен вирус The Second в документе <имя файла> !
Translation: The Second has been detected in the document 'name of file'!
It then deletes the contents of the virus module, without deleting the module TheSecond (which is a type of vaccine for files). If this is successfully completed, a MessageBox in Russian will be displayed on the screen:
Документ <имя файла> вылечен!
Translation: The document has been cleaned!
If the document does not contain the virus TheSecond, Antisec will infect it by writing its code to the document from the file Anti.tmp. A MessageBox in Russian will then be displayed on the screen:
Антивирус добавлен в документ <имя файла> !!!
Translation: An antivirus has been added to the document !!! |
Top Viruses Visited Pages:
Invader. - 239 visits
not-a-virus:RiskWare.Tool.RegPatch. - 73 visits
Worm.P2P.Harex. - 66 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win32.Hidra - 43 visits
Win16.Klon.1177 - 42 visits
Marine.500 - 35 visits
Random Viruses Pages:
LG.
Iet.320
MPS.46
Shish.114
Lcv.86
Rape.2877.
Win95.Markj.82
Ambe
Burger Famil
Crepate.194
|
|
