Selected viruses, spyware, and other threats: sorted alphabetically

This is a family of macro viruses containing single macro AutoOpen (opening of documents). When the file Normal.dot is infected the virus copies it also into macros with names AutoNew (creating of documents) and AutoClose (closing of documents). Most viruses of this family contain lists in the form of a two-byte code. Codes like that are used in countries where number of script characters is higher than 256 (China, Japan, Taiwan etc.). Some variants also have presentation in English. Among those belong inserting of notices:

NO.1 Macro Virus
A monkey has controlled your Word!!!

Some variants contain a slot machine simulator (you gamble betting files) and other variants on specified days simply delete files. The most frequent victims are system files autoexec.bat, config.sys and INI files, but also whole directories (e.g. the directory DOS, ET3 etc.). Some variants of the virus display on the 25th day of each month well-wishing:

MERRY CHRISTMAS

Right after this Christmas greeting the virus deletes DOS, destroys Windows and renames Word menu. In one of the virus versions is the following e-mail address scp01@hotmail.com.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.