Virus.MSWord.Hilight

tag:Macro Viruses

0 0

This is an encrypted macro virus. It contains two macros that have different names in documents and NORMAL.DOT:

Documents  NORMAL.DOT
AutoOpen   AutoExec
PrezentIt  FileSaveAs

The virus infects the system on AutoOpen call and writes itself to documents on FileSaveAs call. The virus creates a counter in system profiles (WIN.INI) file:

[WINDOWS]
Count=0

The virus increases this counter on each AutoExec, and when the counter reaches 10, the virus changes the Windows palette colors.

previous:Virus.MSWord.Hikmat
previous:Virus.MSWord.Header

Virus Source from:

New articles

RedCrossAntivirusRedCrossAntivirus carries out the following actions: When it is run, it connects to the website http://85.231.174/inst.php?id=and the program st...Virus.MSWord.HassleThis is a encrypted virus containing 7 macros:NORMAL.DOTInfected files AutoExecAutoClose FileSaveAsToolsMacro ToolsMacroMicrosoft01 Microsoft05Microsoft02 Micro...Virus.MSWord.HilightThis is an encrypted macro virus. It contains two macros that have different names in documents and NORMAL.DOT:DocumentsNORMAL.DOT AutoOpenAutoExec PrezentItFil...Virus.MSWord.HeaderThis virus contains 3 macros:DocumentsNORMAL.DOT AutoOpenao fsFileSave fsaFileSaveAsThe virus infects the system area on opening an infected document (AutoOpen)...Virus.MSWord.HiacThis macro virus does not manifest itself in any way. It contain two macros in infected documents and NORMAL.DOT:DocumentsNORMAL.DOT ------------------- AutoClo...

Hot Articles

Virus.MSWord.Hilight

Computer Virus Clounds