Class | Virus |
Platform | MSWord |
Description |
Technical Details
The ToolsMacro and ExtrasMakro macros are there to hide the virus in system – on selecting Tool/Macro the virus displays dummy menu that on any item (except CANCEL) displays the error messages:
The virus drops the DOS virus “HLLO.Havoc” by using the trick with DEBUG utility – writes hexadecimal virus dump to disk and runs DEBUG to convert it to DOS executable file HTC.COM. Then the virus appends to the end of the C:AUTOEXEC.BAT file the commands:
and then creates and writes to system profile (WIN.INI) the text:
On April 13 it creates the NORMAL.DOT file and writes the strings to there:
|
Find out the statistics of the threats spreading in your region |