| 1. | Macro.AmiPro.Green
This virus contains four macros (functions): Green_Stripe_Virus,
Infect_File, SaveFile, SaveAsFile. They receive the control when an
infected document is opened, then the virus searches for *.SAM files of the
current directory and infects them.
While infecting a SAM file the virus creates an SMM...
|
| 2. | Macro.Excel.Robocop
This is an Excel macro virus. It contains two modules COP and ROBO. Module
ROBO contains the auto-routine Auto_Open that is executed on opening an
infected file. That macro infects the PERSONAL.XLS file and assigns virus
code as being executed on activating a sheet (SheetActivate handler). As...
|
| 3. | Macro.Excel97.Laroux
This is a virus converted to MS Excel 97 from their MS Excel prototypes and as a result it has the same set of macros, functions, features and effects. See the description of its Excel prototype.
|
| 4. | Macro.PPoint.Attach
This is the first known macro virus infecting MS PowerPoint presentation
files. As well as other viruses infecting MS Office applications this is
written in Visual Basic for Applications (VBA) language, and for spreading
it uses Basic instructions and MS PowerPoint features.
The virus contains...
|
| 5. | Macro.PPoint.Kelly
This macro virus infects the MS PowerPoint presentations. The virus
contains one macro "Jd" in the "Kelly" module. The virus code is activated
on the MouseOver events on the infected form, it then runs its main routine
and infects all form in opened presentations. While...
|
| 6. | Macro.PPoint.ShapeMaster
This macro virus infects the MS PowerPoint presentations. The virus
contains one macro "actionhook" in the "ShapeMaster" module. The virus is
activated on the MouseClick on the infected form, it then runs its
installation routine and infects the PowerPoint installed on the...
|
| 7. | Macro.PPoint.ShapeShift
This is the second known macro virus infecting MS PowerPoint presentations.
It contains five macros in one module "ShapeShift": actionhook, SlideIn,
WackShape, RandomWackSlide, WackPresentation.
To activate its code on a event the virus hooks MouseClick that pass
control to the virus...
|
| 8. | Macro.Visio.Radiant
This is the first known macro-virus infecting Visio documents, stencils and
templates (Visio is the system to create, edit and store business drawing
and diagrams - see http://www.visio.com). To automate data processing, Visio
uses macro-programs written in VBA language (Visual Basic for...
|
| 9. | Macro.Visio.Unstable
This is the second macro-virus that also has pretensions to be The Number
One in the "Macro.Visio" family. This virus is more complex than
Macro.Visio.Radiant - it uses encryption and special
tricks to hide its body in infected files.
The virus infects Visio documents, and stencils and templates...
|
| 10. | Macro.Word.Alex.a
This is an encrypted Chinese Word macro virus. It contains from three to five macros depending on the virus version: autonew, autoopen, autoclose, toolsmacro. It also contains empty macro:
ALEX
The virus replicates itself when documents are created (autonew), opened (autoopen) or closed...
|
