| Description:
|
Details
Macro.AmiPro.Green
This virus contains four macros (functions): Green_Stripe_Virus, Infect_File, SaveFile, SaveAsFile. They receive the control when an infected document is opened, then the virus searches for *.SAM files of the current directory and infects them.
While infecting a SAM file the virus creates an SMM file, and copies itself to there by the command DosCopyFile. Then the virus assigns the Green_Stripe_Virus macro for that file, the virus does it by the AssignMacroToFile command.
Then the virus hooks SaveFile and SaveAsFile macros. When the "Save As" command is performed, the virus infects that document. In case of "Save" command the virus replaces the "its" string with "it's" one within the file. |
