home *** CD-ROM | disk | FTP | other *** search
| Unknown | 1996-02-16 | 13.4 KB |
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4e 47 4d 43 00 5d 44 52 | 00 02 04 50 00 01 00 00 |NGMC.]DR|...P....|
|00000010| 00 0a 4e 56 50 20 54 72 | 6f 6a 61 6e 00 00 1d 00 |..NVP Tr|ojan....|
|00000020| 0d 0c 3c 44 69 73 63 6f | 76 65 72 65 64 20 69 6e |..<Disco|vered in|
|00000030| 20 44 65 63 65 6d 62 65 | 72 20 6f 66 20 31 39 39 | Decembe|r of 199|
|00000040| 34 2c 20 4e 56 50 20 54 | 72 6f 6a 61 6e 20 69 73 |4, NVP T|rojan is|
|00000050| 20 61 20 74 72 6f 6a 61 | 6e 20 68 6f 72 73 65 00 | a troja|n horse.|
|00000060| 1a 0c 46 70 72 6f 67 72 | 61 6d 20 74 68 61 74 20 |..Fprogr|am that |
|00000070| 6d 6f 64 69 66 69 65 73 | 20 79 6f 75 72 20 53 79 |modifies| your Sy|
|00000080| 73 74 65 6d 20 66 69 6c | 65 20 73 6f 20 74 68 61 |stem fil|e so tha|
|00000090| 74 20 77 68 65 6e 20 74 | 65 78 74 20 69 73 20 74 |t when t|ext is t|
|000000a0| 79 70 65 64 2c 20 74 68 | 65 00 27 0c 29 76 6f 77 |yped, th|e.'.)vow|
|000000b0| 65 6c 73 20 28 61 2c 20 | 65 2c 20 69 2c 20 6f 2c |els (a, |e, i, o,|
|000000c0| 20 61 6e 64 20 75 29 20 | 64 6f 20 6e 6f 74 20 61 | and u) |do not a|
|000000d0| 70 70 65 61 72 2e 00 41 | 0c 1a c1 49 6e 66 65 63 |ppear..A|...Infec|
|000000e0| 74 69 6f 6e 20 43 68 61 | 72 61 63 74 65 72 69 73 |tion Cha|racteris|
|000000f0| 74 69 63 73 00 4e 0c 45 | 41 20 74 72 6f 6a 61 6e |tics.N.E|A trojan|
|00000100| 20 68 6f 72 73 65 20 69 | 73 20 61 20 70 72 6f 67 | horse i|s a prog|
|00000110| 72 61 6d 20 74 68 61 74 | 20 61 70 70 65 61 72 73 |ram that| appears|
|00000120| 20 74 6f 20 62 65 20 75 | 73 65 66 75 6c 20 6f 72 | to be u|seful or|
|00000130| 20 69 6e 74 65 72 65 73 | 74 69 6e 67 2c 00 5b 0c | interes|ting,.[.|
|00000140| 36 62 75 74 20 69 6e 73 | 74 65 61 64 20 70 65 72 |6but ins|tead per|
|00000150| 66 6f 72 6d 73 20 73 6f | 6d 65 20 63 6f 76 65 72 |forms so|me cover|
|00000160| 74 20 61 63 74 69 6f 6e | 20 77 68 65 6e 20 6c 61 |t action| when la|
|00000170| 75 6e 63 68 65 64 2e 00 | 75 0c 41 4e 56 50 20 54 |unched..|u.ANVP T|
|00000180| 72 6f 6a 61 6e 20 77 61 | 73 20 66 69 72 73 74 20 |rojan wa|s first |
|00000190| 65 6e 63 6f 75 6e 74 65 | 72 65 64 20 6d 61 73 71 |encounte|red masq|
|000001a0| 75 65 72 61 64 69 6e 67 | 20 61 73 20 61 20 70 72 |uerading| as a pr|
|000001b0| 6f 67 72 61 6d 20 63 61 | 6c 6c 65 64 00 82 0c 45 |ogram ca|lled...E|
|000001c0| 22 4e 65 77 20 4c 6f 6f | 6b 2c 22 20 77 68 69 63 |"New Loo|k," whic|
|000001d0| 68 20 6c 65 74 73 20 79 | 6f 75 20 72 65 64 65 73 |h lets y|ou redes|
|000001e0| 69 67 6e 20 79 6f 75 72 | 20 64 69 73 70 6c 61 79 |ign your| display|
|000001f0| 2e 20 55 6e 64 65 72 20 | 53 79 73 74 65 6d 20 37 |. Under |System 7|
|00000200| 2c 20 4e 56 50 00 8f 0c | 4a 54 72 6f 6a 61 6e 20 |, NVP...|JTrojan |
|00000210| 6d 6f 64 69 66 69 65 73 | 20 74 68 65 20 53 79 73 |modifies| the Sys|
|00000220| 74 65 6d 20 66 69 6c 65 | 20 73 6f 20 74 68 61 74 |tem file| so that|
|00000230| 20 61 66 74 65 72 20 74 | 68 65 20 6e 65 78 74 20 | after t|he next |
|00000240| 72 65 73 74 61 72 74 2c | 20 79 6f 75 20 63 61 6e |restart,| you can|
|00000250| 6e 6f 74 00 9c 0c 49 74 | 79 70 65 20 76 6f 77 65 |not...It|ype vowe|
|00000260| 6c 73 2e 20 45 78 63 65 | 70 74 20 66 6f 72 20 74 |ls. Exce|pt for t|
|00000270| 68 69 73 20 6d 69 73 63 | 68 69 65 76 6f 75 73 20 |his misc|hievous |
|00000280| 62 65 68 61 76 69 6f 72 | 2c 20 65 78 69 73 74 69 |behavior|, existi|
|00000290| 6e 67 20 66 69 6c 65 73 | 20 61 72 65 20 6e 6f 74 |ng files| are not|
|000002a0| 00 a9 0c 47 64 61 6d 61 | 67 65 64 2e 20 55 6e 64 |...Gdama|ged. Und|
|000002b0| 65 72 20 53 79 73 74 65 | 6d 20 36 2c 20 74 68 65 |er Syste|m 6, the|
|000002c0| 20 53 79 73 74 65 6d 20 | 66 69 6c 65 20 69 73 20 | System |file is |
|000002d0| 6d 6f 64 69 66 69 65 64 | 2c 20 62 75 74 20 74 79 |modified|, but ty|
|000002e0| 70 69 6e 67 20 69 73 20 | 6e 6f 74 00 b6 0c 09 61 |ping is |not....a|
|000002f0| 66 66 65 63 74 65 64 2e | 00 d0 0c 47 4e 6f 74 65 |ffected.|...GNote|
|00000300| 20 74 68 61 74 20 61 20 | 74 72 6f 6a 61 6e 20 68 | that a |trojan h|
|00000310| 6f 72 73 65 20 69 73 20 | 6e 6f 74 20 61 20 74 72 |orse is |not a tr|
|00000320| 75 65 20 76 69 72 75 73 | 20 62 65 63 61 75 73 65 |ue virus| because|
|00000330| 20 69 74 20 6e 65 69 74 | 68 65 72 20 73 70 72 65 | it neit|her spre|
|00000340| 61 64 73 00 dd 0c 4a 74 | 6f 20 6f 74 68 65 72 20 |ads...Jt|o other |
|00000350| 66 69 6c 65 73 20 74 6f | 20 63 6f 6e 74 69 6e 75 |files to| continu|
|00000360| 65 20 69 6e 66 65 63 74 | 69 6e 67 2c 20 6e 6f 72 |e infect|ing, nor|
|00000370| 20 72 65 70 6c 69 63 61 | 74 65 73 20 69 74 73 65 | replica|tes itse|
|00000380| 6c 66 2e 20 54 6f 20 64 | 6f 20 64 61 6d 61 67 65 |lf. To d|o damage|
|00000390| 2c 00 ea 0c 2a 74 68 65 | 20 74 72 6f 6a 61 6e 20 |,...*the| trojan |
|000003a0| 68 6f 72 73 65 20 68 6f | 73 74 20 70 72 6f 67 72 |horse ho|st progr|
|000003b0| 61 6d 20 6d 75 73 74 20 | 62 65 20 72 75 6e 2e 01 |am must |be run..|
|000003c0| 04 0c 0a c1 44 65 74 65 | 63 74 69 6f 6e 01 11 0d |....Dete|ction...|
|000003d0| 46 ff a5 c0 20 53 41 4d | 20 64 65 74 65 63 74 73 |F... SAM| detects|
|000003e0| 20 62 6f 74 68 20 74 68 | 65 20 4e 56 50 20 54 72 | both th|e NVP Tr|
|000003f0| 6f 6a 61 6e 20 68 6f 72 | 73 65 20 61 6e 64 20 74 |ojan hor|se and t|
|00000400| 68 65 20 6d 6f 64 69 66 | 69 65 64 20 53 79 73 74 |he modif|ied Syst|
|00000410| 65 6d 20 66 69 6c 65 01 | 1e 16 0e 77 68 65 6e 20 |em file.|...when |
|00000420| 73 63 61 6e 6e 69 6e 67 | 2e 01 38 0d 42 ff a5 c0 |scanning|..8.B...|
|00000430| 20 53 41 4d 20 49 6e 74 | 65 72 63 65 70 74 20 77 | SAM Int|ercept w|
|00000440| 61 72 6e 73 20 79 6f 75 | 20 77 68 65 6e 20 61 6e |arns you| when an|
|00000450| 20 61 74 74 65 6d 70 74 | 20 69 73 20 6d 61 64 65 | attempt| is made|
|00000460| 20 74 6f 20 6d 6f 64 69 | 66 79 20 79 6f 75 72 01 | to modi|fy your.|
|00000470| 45 16 0c 53 79 73 74 65 | 6d 20 66 69 6c 65 2e 01 |E..Syste|m file..|
|00000480| 5f 0c 0d c1 52 65 70 61 | 72 61 62 69 6c 69 74 79 |_...Repa|rability|
|00000490| 01 6c 0d 46 ff a5 c0 20 | 53 41 4d 20 63 61 6e 20 |.l.F... |SAM can |
|000004a0| 72 65 70 61 69 72 20 79 | 6f 75 72 20 6d 6f 64 69 |repair y|our modi|
|000004b0| 66 69 65 64 20 53 79 73 | 74 65 6d 20 66 69 6c 65 |fied Sys|tem file|
|000004c0| 20 61 6e 64 20 6e 65 75 | 74 72 61 6c 69 7a 65 20 | and neu|tralize |
|000004d0| 74 68 65 20 74 72 6f 6a | 61 6e 01 79 16 47 68 6f |the troj|an.y.Gho|
|000004e0| 72 73 65 2e 20 59 6f 75 | 20 6d 75 73 74 20 72 65 |rse. You| must re|
|000004f0| 73 74 61 72 74 20 61 66 | 74 65 72 20 74 68 65 20 |start af|ter the |
|00000500| 72 65 70 61 69 72 20 74 | 6f 20 74 79 70 65 20 76 |repair t|o type v|
|00000510| 6f 77 65 6c 73 20 61 67 | 61 69 6e 2e 20 41 6c 74 |owels ag|ain. Alt|
|00000520| 68 6f 75 67 68 01 86 16 | 47 69 74 20 69 73 20 6e |hough...|Git is n|
|00000530| 6f 20 6c 6f 6e 67 65 72 | 20 68 61 72 6d 66 75 6c |o longer| harmful|
|00000540| 2c 20 64 65 6c 65 74 65 | 20 74 68 65 20 74 72 6f |, delete| the tro|
|00000550| 6a 61 6e 20 68 6f 72 73 | 65 20 68 6f 73 74 20 61 |jan hors|e host a|
|00000560| 70 70 6c 69 63 61 74 69 | 6f 6e 20 61 66 74 65 72 |pplicati|on after|
|00000570| 01 93 16 07 72 65 70 61 | 69 72 2e 01 ad 0c 1b 44 |....repa|ir.....D|
|00000580| 6e 27 74 20 77 72 72 79 | 2c 20 53 4d 20 77 6c 6c |n't wrry|, SM wll|
|00000590| 20 73 76 20 74 68 20 64 | 79 21 01 c7 0c 03 53 65 | sv th d|y!....Se|
|000005a0| 65 81 d4 0c 17 c2 55 70 | 64 61 74 69 6e 67 20 41 |e.....Up|dating A|
|000005b0| 75 74 6f 6d 61 74 69 63 | 61 6c 6c 79 81 e1 0c 0e |utomatic|ally....|
|000005c0| c2 4b 6e 6f 77 6e 20 56 | 69 72 75 73 65 73 44 52 |.Known V|irusesDR|
|000005d0| 00 24 04 04 00 02 04 18 | 04 05 04 0d 00 00 04 06 |.$......|........|
|000005e0| 04 0e 04 19 04 07 04 0f | 04 1a 04 08 04 10 04 1b |........|........|
|000005f0| 00 06 04 11 04 1c 04 09 | 04 12 04 1d 00 05 04 13 |........|........|
|00000600| 04 1e 04 0a 04 14 00 03 | 04 0b 04 15 00 04 00 07 |........|........|
|00000610| 04 16 04 1f 04 0c 04 17 | 04 50 00 00 01 04 50 16 |........|.P....P.|
|00000620| 55 70 64 61 74 69 6e 67 | 20 41 75 74 6f 6d 61 74 |Updating| Automat|
|00000630| 69 63 61 6c 6c 79 0d 4b | 6e 6f 77 6e 20 56 69 72 |ically.K|nown Vir|
|00000640| 75 73 65 73 00 00 44 00 | 10 0c 42 54 68 65 73 65 |uses..D.|..BThese|
|00000650| 20 61 72 65 20 74 68 65 | 20 6b 6e 6f 77 6e 20 4d | are the| known M|
|00000660| 61 63 69 6e 74 6f 73 68 | 20 76 69 72 75 73 65 73 |acintosh| viruses|
|00000670| 2e 20 43 6c 69 63 6b 20 | 61 20 76 69 72 75 73 20 |. Click |a virus |
|00000680| 6e 61 6d 65 20 66 6f 72 | 20 6d 6f 72 65 00 1d 0c |name for| more...|
|00000690| 0c 69 6e 66 6f 72 6d 61 | 74 69 6f 6e 3a 80 3a 24 |.informa|tion:.:$|
|000006a0| 1c c2 41 6e 74 69 b9 c2 | 48 43 20 39 35 30 37 80 |..Anti..|HC 9507.|
|000006b0| 00 ea c2 6e 56 49 52 20 | 28 41 2f 42 29 80 4a 24 |...nVIR |(A/B).J$|
|000006c0| 23 c2 43 44 45 46 b4 c2 | 48 43 20 56 49 52 55 53 |#.CDEF..|HC VIRUS|
|000006d0| 2f 33 20 54 75 6e 65 73 | 8b c2 4e 56 50 20 54 72 |/3 Tunes|..NVP Tr|
|000006e0| 6f 6a 61 6e 80 5a 24 1d | c2 43 68 69 6e 61 54 61 |ojan.Z$.|.ChinaTa|
|000006f0| 6c 6b 98 c2 49 4e 49 54 | 20 31 37 80 00 ea c2 53 |lk..INIT| 17....S|
|00000700| 63 6f 72 65 73 80 6a 24 | 1c c2 43 4f 44 45 2d 31 |cores.j$|..CODE-1|
|00000710| a4 c2 49 4e 49 54 20 32 | 39 41 2f 42 b2 c2 53 74 |..INIT 2|9A/B..St|
|00000720| 65 72 6f 69 64 80 7a 24 | 1f c2 43 4f 44 45 20 32 |eroid.z$|..CODE 2|
|00000730| 35 32 98 c2 49 4e 49 54 | 20 31 39 38 34 b8 c2 54 |52..INIT| 1984..T|
|00000740| 34 2d 41 2f 42 28 43 29 | 80 8a 24 1e c2 43 6f 6c |4-A/B(C)|..$..Col|
|00000750| 6f 72 73 ac c2 49 4e 49 | 54 2d 39 34 30 33 b4 c2 |ors..INI|T-9403..|
|00000760| 54 65 74 72 61 63 79 63 | 6c 65 80 9a 24 1b c2 43 |Tetracyc|le..$..C|
|00000770| 50 72 6f b5 c2 49 4e 49 | 54 20 4d 80 00 ea c2 56 |Pro..INI|T M....V|
|00000780| 69 72 75 73 20 49 6e 66 | 6f 80 aa 24 14 c2 44 4d |irus Inf|o..$..DM|
|00000790| 56 b8 c2 4d 61 63 4d 61 | 67 80 00 ea c2 57 44 45 |V..MacMa|g....WDE|
|000007a0| 46 80 ba 24 23 c2 44 75 | 6b 61 6b 69 73 a3 c2 4d |F..$#.Du|kakis..M|
|000007b0| 42 44 46 20 41 2f 42 ba | c2 57 6f 72 64 20 4d 61 |BDF A/B.|.Word Ma|
|000007c0| 63 72 6f 20 39 35 30 38 | 80 ca 24 2c c2 46 6f 6e |cro 9508|..$,.Fon|
|000007d0| 74 46 69 6e 64 65 72 92 | c2 4d 44 45 46 20 41 20 |tFinder.|.MDEF A |
|000007e0| 28 42 2c 43 2c 44 29 97 | c2 57 6f 72 64 20 4d 61 |(B,C,D).|.Word Ma|
|000007f0| 63 72 6f 20 39 35 30 39 | 80 da 24 19 c2 46 6f 72 |cro 9509|..$..For|
|00000800| 6d 61 74 43 a1 c2 4d 65 | 72 72 79 20 58 4d 41 53 |matC..Me|rry XMAS|
|00000810| ad c2 5a 55 43 80 ea 24 | 10 c2 46 72 61 6e 6b 69 |..ZUC..$|..Franki|
|00000820| 65 a4 c2 4d 6f 73 61 69 | 63 01 0d 0c 24 c1 48 6f |e..Mosai|c...$.Ho|
|00000830| 77 20 74 6f 20 55 70 64 | 61 74 65 20 53 41 4d 20 |w to Upd|ate SAM |
|00000840| 56 69 72 75 73 20 44 65 | 66 69 6e 69 74 69 6f 6e |Virus De|finition|
|00000850| 73 01 1a 0c 3d 53 79 6d | 61 6e 74 65 63 20 69 73 |s...=Sym|antec is|
|00000860| 20 63 6f 6d 6d 69 74 74 | 65 64 20 74 6f 20 6b 65 | committ|ed to ke|
|00000870| 65 70 69 6e 67 20 79 6f | 75 72 20 4d 61 63 69 6e |eping yo|ur Macin|
|00000880| 74 6f 73 68 20 76 69 72 | 75 73 20 66 72 65 65 20 |tosh vir|us free |
|00000890| 62 79 01 27 0c 42 6f 66 | 66 65 72 69 6e 67 20 79 |by.'.Bof|fering y|
|000008a0| 6f 75 20 6d 61 6e 79 20 | 77 61 79 73 20 74 6f 20 |ou many |ways to |
|000008b0| 73 74 61 79 20 75 70 64 | 61 74 65 64 20 69 6e 20 |stay upd|ated in |
|000008c0| 74 68 65 20 62 61 74 74 | 6c 65 20 61 67 61 69 6e |the batt|le again|
|000008d0| 73 74 20 76 69 72 61 6c | 01 34 0c 47 69 6e 66 65 |st viral|.4.Ginfe|
|000008e0| 63 74 69 6f 6e 2e 20 46 | 69 72 73 74 2c 20 79 6f |ction. F|irst, yo|
|000008f0| 75 20 6d 75 73 74 20 6b | 65 65 70 20 75 70 20 77 |u must k|eep up w|
|00000900| 69 74 68 20 61 6e 79 20 | 75 70 67 72 61 64 65 73 |ith any |upgrades|
|00000910| 20 74 6f 20 53 41 4d 2e | 20 54 68 65 6e 2c 20 61 | to SAM.| Then, a|
|00000920| 73 20 61 01 41 0c 34 72 | 65 67 69 73 74 65 72 65 |s a.A.4r|egistere|
|00000930| 64 20 53 41 4d 20 6f 77 | 6e 65 72 20 69 6e 20 74 |d SAM ow|ner in t|
|00000940| 68 65 20 55 2e 53 2e 20 | 6f 72 20 43 61 6e 61 64 |he U.S. |or Canad|
|00000950| 61 2c 20 79 6f 75 20 6d | 61 79 3a 01 5b 0d 49 ff |a, you m|ay:.[.I.|
|00000960| a5 c0 20 55 73 65 20 74 | 68 65 20 55 70 64 61 74 |.. Use t|he Updat|
|00000970| 65 20 56 69 72 75 73 20 | 44 65 66 69 6e 69 74 69 |e Virus |Definiti|
|00000980| 6f 6e 73 2e 2e 2e 20 63 | 6f 6d 6d 61 6e 64 20 74 |ons... c|ommand t|
|00000990| 6f 20 64 69 61 6c 20 53 | 79 6d 61 6e 74 65 63 20 |o dial S|ymantec |
|000009a0| 64 69 72 65 63 74 6c 79 | 01 68 16 45 66 72 6f 6d |directly|.h.Efrom|
|000009b0| 20 79 6f 75 72 20 6d 6f | 64 65 6d 2e 20 54 68 69 | your mo|dem. Thi|
|000009c0| 73 20 61 6c 6c 6f 77 73 | 20 79 6f 75 20 74 6f 20 |s allows| you to |
|000009d0| 61 75 74 6f 6d 61 74 69 | 63 61 6c 6c 79 20 64 6f |automati|cally do|
|000009e0| 77 6e 6c 6f 61 64 20 74 | 68 65 20 6c 61 74 65 73 |wnload t|he lates|
|000009f0| 74 01 75 16 3e 76 69 72 | 75 73 20 64 65 66 69 6e |t.u.>vir|us defin|
|00000a00| 69 74 69 6f 6e 73 2e 20 | 54 68 65 20 70 68 6f 6e |itions. |The phon|
|00000a10| 65 20 6e 75 6d 62 65 72 | 20 69 73 20 61 75 74 6f |e number| is auto|
|00000a20| 6d 61 74 69 63 61 6c 6c | 79 20 70 72 6f 76 69 64 |maticall|y provid|
|00000a30| 65 64 2e 01 82 16 45 49 | 6e 74 65 72 6e 61 74 69 |ed....EI|nternati|
|00000a40| 6f 6e 61 6c 20 63 75 73 | 74 6f 6d 65 72 73 20 6e |onal cus|tomers n|
|00000a50| 65 65 64 20 74 6f 20 72 | 65 76 69 65 77 20 74 68 |eed to r|eview th|
|00000a60| 65 20 52 65 61 64 20 4d | 65 20 66 69 6c 65 20 66 |e Read M|e file f|
|00000a70| 6f 72 20 74 68 65 20 70 | 68 6f 6e 65 01 8f 16 07 |or the p|hone....|
|00000a80| 6e 75 6d 62 65 72 2e 81 | a9 0c 42 53 65 65 20 c2 |number..|..BSee .|
|00000a90| 55 70 64 61 74 69 6e 67 | 20 41 75 74 6f 6d 61 74 |Updating| Automat|
|00000aa0| 69 63 61 6c 6c 79 c0 2e | 20 53 65 65 20 61 6c 73 |ically..| See als|
|00000ab0| 6f 20 43 68 61 70 74 65 | 72 20 36 2c 20 22 4b 65 |o Chapte|r 6, "Ke|
|00000ac0| 65 70 69 6e 67 20 55 70 | 20 77 69 74 68 01 b6 0c |eping Up| with...|
|00000ad0| 38 4e 65 77 20 56 69 72 | 75 73 65 73 22 20 69 6e |8New Vir|uses" in|
|00000ae0| 20 74 68 65 20 70 72 69 | 6e 74 65 64 20 6d 61 6e | the pri|nted man|
|00000af0| 75 61 6c 20 66 6f 72 20 | 6d 6f 72 65 20 69 6e 66 |ual for |more inf|
|00000b00| 6f 72 6d 61 74 69 6f 6e | 2e 01 d0 0d 40 ff a5 c0 |ormation|....@...|
|00000b10| 20 53 69 67 6e 20 75 70 | 20 66 6f 72 20 6f 75 72 | Sign up| for our|
|00000b20| 20 53 79 6d 61 6e 74 65 | 63 20 53 41 56 2d 55 20 | Symante|c SAV-U |
|00000b30| 73 75 62 73 63 72 69 70 | 74 69 6f 6e 20 73 65 72 |subscrip|tion ser|
|00000b40| 76 69 63 65 73 20 66 6f | 72 20 53 41 4d 01 dd 16 |vices fo|r SAM...|
|00000b50| 45 77 68 65 72 65 20 79 | 6f 75 20 61 75 74 6f 6d |Ewhere y|ou autom|
|00000b60| 61 74 69 63 61 6c 6c 79 | 20 72 65 63 65 69 76 65 |atically| receive|
|00000b70| 20 61 20 76 69 72 75 73 | 20 64 65 66 69 6e 69 74 | a virus| definit|
|00000b80| 69 6f 6e 20 64 69 73 6b | 20 61 6e 79 74 69 6d 65 |ion disk| anytime|
|00000b90| 20 61 20 6e 65 77 01 ea | 16 44 76 69 72 75 73 20 | a new..|.Dvirus |
|00000ba0| 69 73 20 64 69 73 63 6f | 76 65 72 65 64 2e 20 45 |is disco|vered. E|
|00000bb0| 61 63 68 20 75 70 64 61 | 74 65 20 64 69 73 6b 20 |ach upda|te disk |
|00000bc0| 63 6f 6e 74 61 69 6e 73 | 20 70 72 65 76 69 6f 75 |contains| previou|
|00000bd0| 73 20 64 65 66 69 6e 69 | 74 69 6f 6e 73 2c 01 f7 |s defini|tions,..|
|00000be0| 16 47 6e 65 77 20 76 69 | 72 75 73 20 64 65 66 69 |.Gnew vi|rus defi|
|00000bf0| 6e 69 74 69 6f 6e 73 2c | 20 61 6e 64 20 64 65 73 |nitions,| and des|
|00000c00| 63 72 69 70 74 69 6f 6e | 73 20 6f 66 20 74 68 65 |cription|s of the|
|00000c10| 20 6e 65 77 20 64 65 66 | 69 6e 69 74 69 6f 6e 73 | new def|initions|
|00000c20| 20 74 68 61 74 20 61 72 | 65 02 04 16 18 61 64 64 | that ar|e....add|
|00000c30| 65 64 20 74 6f 20 53 41 | 4d 20 56 69 72 75 73 20 |ed to SA|M Virus |
|00000c40| 48 65 6c 70 2e 02 1e 16 | 35 54 6f 20 65 6e 72 6f |Help....|5To enro|
|00000c50| 6c 6c 20 69 6e 20 74 68 | 65 20 55 2e 53 2e 20 6f |ll in th|e U.S. o|
|00000c60| 72 20 43 61 6e 61 64 61 | 2c 20 63 61 6c 6c 20 28 |r Canada|, call (|
|00000c70| 38 30 30 29 20 34 35 33 | 2d 31 31 30 32 2e 02 2b |800) 453|-1102..+|
|00000c80| 16 45 49 6e 74 65 72 6e | 61 74 69 6f 6e 61 6c 20 |.EIntern|ational |
|00000c90| 63 75 73 74 6f 6d 65 72 | 73 20 73 68 6f 75 6c 64 |customer|s should|
|00000ca0| 20 63 6f 6e 74 61 63 74 | 20 74 68 65 69 72 20 6c | contact| their l|
|00000cb0| 6f 63 61 6c 20 64 65 61 | 6c 65 72 20 6f 72 20 53 |ocal dea|ler or S|
|00000cc0| 79 6d 61 6e 74 65 63 02 | 38 16 42 6f 66 66 69 63 |ymantec.|8.Boffic|
|00000cd0| 65 20 66 6f 72 20 69 6e | 66 6f 72 6d 61 74 69 6f |e for in|formatio|
|00000ce0| 6e 20 6f 6e 20 73 75 62 | 73 63 72 69 70 74 69 6f |n on sub|scriptio|
|00000cf0| 6e 20 73 65 72 76 69 63 | 65 73 20 61 76 61 69 6c |n servic|es avail|
|00000d00| 61 62 6c 65 20 69 6e 20 | 74 68 65 69 72 02 45 16 |able in |their.E.|
|00000d10| 06 61 72 65 61 73 2e 02 | 5f 0d 42 ff a5 c0 20 44 |.areas..|_.B... D|
|00000d20| 6f 77 6e 6c 6f 61 64 20 | 61 6e 20 75 70 64 61 74 |ownload |an updat|
|00000d30| 65 64 20 53 41 4d 20 56 | 69 72 75 73 20 44 65 66 |ed SAM V|irus Def|
|00000d40| 69 6e 69 74 69 6f 6e 73 | 20 66 69 6c 65 20 66 72 |initions| file fr|
|00000d50| 6f 6d 20 6f 6e 65 20 6f | 66 20 74 68 65 02 6c 16 |om one o|f the.l.|
|00000d60| 1b 66 6f 6c 6c 6f 77 69 | 6e 67 20 6f 6e 2d 6c 69 |.followi|ng on-li|
|00000d70| 6e 65 20 73 65 72 76 69 | 63 65 73 3a 02 86 0c 0b |ne servi|ces:....|
|00000d80| c1 43 6f 6d 70 75 53 65 | 72 76 65 02 93 24 0d 47 |.CompuSe|rve..$.G|
|00000d90| 6f 3a c1 20 53 59 4d 56 | 49 52 55 53 02 a0 24 0f |o:. SYMV|IRUS..$.|
|00000da0| 45 6e 74 65 72 20 6c 69 | 62 72 61 72 79 20 32 02 |Enter li|brary 2.|
|00000db0| ad 24 2e 46 69 6c 65 6e | 61 6d 65 73 3a 20 53 41 |.$.Filen|ames: SA|
|00000dc0| 4d 44 45 46 2e 42 49 4e | 20 20 28 53 41 4d 20 56 |MDEF.BIN| (SAM V|
|00000dd0| 69 72 75 73 20 44 65 66 | 69 6e 69 74 69 6f 6e 73 |irus Def|initions|
|00000de0| 29 02 ba 48 23 20 20 20 | 20 20 20 53 41 4d 56 48 |)..H# | SAMVH|
|00000df0| 50 2e 42 49 4e 20 20 20 | 28 53 41 4d 20 56 69 72 |P.BIN |(SAM Vir|
|00000e00| 75 73 20 48 65 6c 70 29 | 02 c7 0c 0a c1 41 70 70 |us Help)|.....App|
|00000e10| 6c 65 4c 69 6e 6b 02 d4 | 24 17 50 61 74 68 3a 20 |leLink..|$.Path: |
|00000e20| 88 53 6f 66 74 77 61 72 | 65 20 53 61 6d 70 6c 65 |.Softwar|e Sample|
|00000e30| 72 02 e1 48 1c 54 68 69 | 72 64 20 50 61 72 74 79 |r..H.Thi|rd Party|
|00000e40| 20 44 65 6d 6f 73 20 26 | 20 55 70 67 72 61 64 65 | Demos &| Upgrade|
|00000e50| 73 02 ee 48 10 53 6f 66 | 74 77 61 72 65 20 55 70 |s..H.Sof|tware Up|
|00000e60| 64 61 74 65 73 02 fb 48 | 0d 43 6f 6d 70 61 6e 69 |dates..H|.Compani|
|00000e70| 65 73 20 53 2d 5a 03 08 | 48 08 53 79 6d 61 6e 74 |es S-Z..|H.Symant|
|00000e80| 65 63 03 15 24 1f 46 69 | 6c 65 6e 61 6d 65 3a 20 |ec..$.Fi|lename: |
|00000e90| 53 41 4d 20 56 69 72 75 | 73 20 44 65 66 69 6e 69 |SAM Viru|s Defini|
|00000ea0| 74 69 6f 6e 73 03 25 0c | 0f c1 41 6d 65 72 69 63 |tions.%.|..Americ|
|00000eb0| 61 20 4f 6e 6c 69 6e 65 | 03 32 24 12 4b 65 79 77 |a Online|.2$.Keyw|
|00000ec0| 6f 72 64 3a c1 20 53 79 | 6d 61 6e 74 65 63 03 3f |ord:. Sy|mantec.?|
|00000ed0| 24 1a 45 6e 74 65 72 20 | 74 68 65 20 73 6f 66 74 |$.Enter |the soft|
|00000ee0| 77 61 72 65 20 6c 69 62 | 72 61 72 79 03 4c 24 1f |ware lib|rary.L$.|
|00000ef0| 46 69 6c 65 6e 61 6d 65 | 3a 20 53 41 4d 20 56 69 |Filename|: SAM Vi|
|00000f00| 72 75 73 20 44 65 66 69 | 6e 69 74 69 6f 6e 73 03 |rus Defi|nitions.|
|00000f10| 66 0c 39 c1 4f 74 68 65 | 72 20 73 65 72 76 69 63 |f.9.Othe|r servic|
|00000f20| 65 73 20 61 76 61 69 6c | 61 62 6c 65 20 74 6f 20 |es avail|able to |
|00000f30| 75 73 65 72 73 20 69 6e | 20 74 68 65 20 55 2e 53 |users in| the U.S|
|00000f40| 2e 20 61 6e 64 20 43 61 | 6e 61 64 61 03 73 0c 09 |. and Ca|nada.s..|
|00000f50| c1 69 6e 63 6c 75 64 65 | 3a 03 8d 0d 47 ff a5 c0 |.include|:...G...|
|00000f60| 20 49 6e 64 69 76 69 64 | 75 61 6c 20 75 70 64 61 | Individ|ual upda|
|00000f70| 74 65 20 64 69 73 6b 73 | 20 66 72 6f 6d 20 53 79 |te disks| from Sy|
|00000f80| 6d 61 6e 74 65 63 20 28 | 6f 72 64 65 72 20 61 73 |mantec (|order as|
|00000f90| 20 6e 65 65 64 65 64 29 | 2e 20 43 61 6c 6c 20 28 | needed)|. Call (|
|00000fa0| 38 30 30 29 03 9a 16 09 | 34 34 31 2d 37 32 33 34 |800)....|441-7234|
|00000fb0| 2e 03 b4 0c 3c ff a5 c0 | 20 54 68 65 20 4d 61 63 |....<...| The Mac|
|00000fc0| 20 54 69 70 73 20 4c 69 | 6e 65 20 28 35 30 33 29 | Tips Li|ne (503)|
|00000fd0| 20 34 36 35 2d 38 35 38 | 35 20 6f 72 20 74 68 65 | 465-858|5 or the|
|00000fe0| 20 53 79 6d 61 6e 74 65 | 63 20 46 61 73 74 46 61 | Symante|c FastFa|
|00000ff0| 78 03 c1 16 38 41 75 74 | 6f 6d 61 74 65 64 20 46 |x...8Aut|omated F|
|00001000| 61 78 20 53 79 73 74 65 | 6d 20 28 38 30 30 29 20 |ax Syste|m (800) |
|00001010| 35 35 34 2d 34 34 30 33 | 20 66 6f 72 20 75 73 65 |554-4403| for use|
|00001020| 72 20 64 65 66 69 6e 69 | 74 69 6f 6e 73 03 ce 16 |r defini|tions...|
|00001030| 08 75 70 64 61 74 65 73 | 2e 03 e8 0d 44 ff a5 c0 |.updates|....D...|
|00001040| 20 54 68 65 20 53 79 6d | 61 6e 74 65 63 20 42 75 | The Sym|antec Bu|
|00001050| 6c 6c 65 74 69 6e 20 42 | 6f 61 72 64 20 53 79 73 |lletin B|oard Sys|
|00001060| 74 65 6d 20 28 42 42 53 | 29 2e 20 44 69 61 6c 20 |tem (BBS|). Dial |
|00001070| 69 6e 20 61 6e 64 20 64 | 6f 77 6e 6c 6f 61 64 20 |in and d|ownload |
|00001080| 61 03 f5 16 1e 53 41 4d | 20 56 69 72 75 73 20 44 |a....SAM| Virus D|
|00001090| 65 66 69 6e 69 74 69 6f | 6e 73 20 66 69 6c 65 20 |efinitio|ns file |
|000010a0| 61 74 3a 04 02 0c 1c 2d | 20 28 35 30 33 29 20 34 |at:....-| (503) 4|
|000010b0| 38 34 2d 36 36 39 39 20 | 28 32 34 30 30 20 62 61 |84-6699 |(2400 ba|
|000010c0| 75 64 29 04 0f 0c 1c 2d | 20 28 35 30 33 29 20 34 |ud)....-| (503) 4|
|000010d0| 38 34 2d 36 36 36 39 20 | 28 39 36 30 30 20 62 61 |84-6669 |(9600 ba|
|000010e0| 75 64 29 04 29 0c 27 42 | 65 20 73 75 72 65 20 74 |ud).).'B|e sure t|
|000010f0| 68 61 74 20 79 6f 75 20 | 75 73 65 20 61 20 62 69 |hat you |use a bi|
|00001100| 6e 61 72 79 20 70 72 6f | 74 6f 63 6f 6c 2e 04 43 |nary pro|tocol..C|
|00001110| 0c 38 41 73 20 79 6f 75 | 20 63 61 6e 20 73 65 65 |.8As you| can see|
|00001120| 2c 20 77 65 ff d5 76 65 | 20 67 6f 74 20 79 6f 75 |, we..ve| got you|
|00001130| 20 63 6f 76 65 72 65 64 | 2e 20 43 68 6f 6f 73 65 | covered|. Choose|
|00001140| 20 74 68 65 20 76 69 72 | 75 73 04 50 0c 44 64 65 | the vir|us.P.Dde|
|00001150| 74 65 63 74 69 6f 6e 2f | 70 72 65 76 65 6e 74 69 |tection/|preventi|
|00001160| 6f 6e 20 75 70 64 61 74 | 65 20 6d 65 74 68 6f 64 |on updat|e method|
|00001170| 20 74 68 61 74 20 77 6f | 72 6b 73 20 62 65 73 74 | that wo|rks best|
|00001180| 20 66 6f 72 20 79 6f 75 | 20 61 6e 64 20 73 74 69 | for you| and sti|
|00001190| 63 6b 04 5d 0c 08 77 69 | 74 68 20 69 74 21 44 52 |ck.]..wi|th it!DR|
|000011a0| 00 02 04 50 00 01 00 00 | 00 07 48 43 20 39 35 30 |...P....|..HC 950|
|000011b0| 37 00 00 1b 00 10 0c 3d | 54 68 65 c1 20 48 43 20 |7......=|The. HC |
|000011c0| 39 35 30 37 c0 20 76 69 | 72 75 73 2c 20 64 69 73 |9507. vi|rus, dis|
|000011d0| 63 6f 76 65 72 65 64 20 | 69 6e 20 6c 61 74 65 20 |covered |in late |
|000011e0| 4a 75 6c 79 20 6f 66 20 | 31 39 39 35 2c 20 69 6e |July of |1995, in|
|000011f0| 66 65 63 74 73 00 1d 0c | 3e 48 79 70 65 72 43 61 |fects...|>HyperCa|
|00001200| 72 64 20 73 74 61 63 6b | 73 20 6f 6e 6c 79 2e 20 |rd stack|s only. |
|00001210| 48 43 20 39 35 30 37 20 | 64 6f 65 73 20 6e 6f 74 |HC 9507 |does not|
|00001220| 20 69 6e 66 65 63 74 20 | 73 79 73 74 65 6d 20 66 | infect |system f|
|00001230| 69 6c 65 73 20 6f 72 00 | 2a 0c 12 61 70 70 6c 69 |iles or.|*..appli|
|00001240| 63 61 74 69 6f 6e 20 66 | 69 6c 65 73 2e 00 44 0c |cation f|iles..D.|
|00001250| 1b c1 49 6e 66 65 63 74 | 69 6f 6e 20 43 68 61 72 |..Infect|ion Char|
|00001260| 61 63 74 65 72 69 73 74 | 69 63 73 3a 00 51 0c 43 |acterist|ics:.Q.C|
|00001270| 57 68 65 6e 20 61 6e 20 | 69 6e 66 65 63 74 65 64 |When an |infected|
|00001280| 20 73 74 61 63 6b 20 69 | 73 20 6c 61 75 6e 63 68 | stack i|s launch|
|00001290| 65 64 2c 20 48 43 20 39 | 35 30 37 20 66 69 72 73 |ed, HC 9|507 firs|
|000012a0| 74 20 65 78 61 6d 69 6e | 65 73 20 74 68 65 20 48 |t examin|es the H|
|000012b0| 6f 6d 65 00 5e 0c 48 73 | 74 61 63 6b 2e 20 49 66 |ome.^.Hs|tack. If|
|000012c0| 20 69 74 ff d5 73 20 6e | 6f 74 20 61 6c 72 65 61 | it..s n|ot alrea|
|000012d0| 64 79 20 69 6e 66 65 63 | 74 65 64 2c 20 48 43 20 |dy infec|ted, HC |
|000012e0| 39 35 30 37 20 73 61 6e | 64 77 69 63 68 65 73 20 |9507 san|dwiches |
|000012f0| 69 74 73 65 6c 66 20 69 | 6e 74 6f 20 74 68 65 00 |itself i|nto the.|
|00001300| 6b 0c 40 73 63 72 69 70 | 74 20 6f 66 20 74 68 65 |k.@scrip|t of the|
|00001310| 20 48 6f 6d 65 20 73 74 | 61 63 6b 2e 20 49 66 20 | Home st|ack. If |
|00001320| 74 68 65 20 68 6f 6d 65 | 20 73 74 61 63 6b 20 69 |the home| stack i|
|00001330| 73 20 69 6e 66 65 63 74 | 65 64 2c 20 48 43 20 39 |s infect|ed, HC 9|
|00001340| 35 30 37 00 78 0c 46 61 | 74 74 65 6d 70 74 73 20 |507.x.Fa|ttempts |
|00001350| 74 6f 20 69 6e 66 65 63 | 74 20 6f 74 68 65 72 20 |to infec|t other |
|00001360| 72 75 6e 6e 69 6e 67 20 | 48 79 70 65 72 43 61 72 |running |HyperCar|
|00001370| 64 20 73 74 61 63 6b 73 | 2e 20 41 66 74 65 72 20 |d stacks|. After |
|00001380| 69 6e 66 65 63 74 69 6e | 67 20 74 68 65 00 85 0c |infectin|g the...|
|00001390| 44 72 75 6e 6e 69 6e 67 | 20 73 74 61 63 6b 73 2c |Drunning| stacks,|
|000013a0| 20 48 43 20 39 35 30 37 | 20 69 6e 66 65 63 74 73 | HC 9507| infects|
|000013b0| 20 6f 74 68 65 72 20 73 | 74 61 63 6b 73 20 6f 6e | other s|tacks on|
|000013c0| 20 74 68 65 20 73 74 61 | 72 74 75 70 20 64 72 69 | the sta|rtup dri|
|000013d0| 76 65 20 61 74 00 92 0c | 07 72 61 6e 64 6f 6d 2e |ve at...|.random.|
|000013e0| 00 ac 0c 44 42 65 63 61 | 75 73 65 20 6f 66 20 74 |...DBeca|use of t|
|000013f0| 68 65 20 77 61 79 20 74 | 68 61 74 20 74 68 65 20 |he way t|hat the |
|00001400| 76 69 72 75 73 20 69 73 | 20 69 6e 73 65 72 74 65 |virus is| inserte|
|00001410| 64 20 69 6e 74 6f 20 73 | 74 61 63 6b 20 73 63 72 |d into s|tack scr|
|00001420| 69 70 74 73 2c 20 69 74 | 00 b9 0c 49 61 74 74 65 |ipts, it|...Iatte|
|00001430| 6d 70 74 73 20 74 6f 20 | 73 70 72 65 61 64 20 62 |mpts to |spread b|
|00001440| 6f 74 68 20 77 68 65 6e | 20 61 6e 20 69 6e 66 65 |oth when| an infe|
|00001450| 63 74 65 64 20 73 74 61 | 63 6b 20 69 73 20 6c 61 |cted sta|ck is la|
|00001460| 75 6e 63 68 65 64 20 61 | 6e 64 20 77 68 65 6e 20 |unched a|nd when |
|00001470| 69 74 20 69 73 00 c6 0c | 07 63 6c 6f 73 65 64 2e |it is...|.closed.|
|00001480| 00 e0 0c 43 54 68 65 20 | 48 43 20 39 35 30 37 20 |...CThe |HC 9507 |
|00001490| 76 69 72 75 73 20 63 61 | 75 73 65 73 20 75 6e 75 |virus ca|uses unu|
|000014a0| 73 75 61 6c 20 73 79 73 | 74 65 6d 20 62 65 68 61 |sual sys|tem beha|
|000014b0| 76 69 6f 72 73 2c 20 64 | 65 70 65 6e 64 69 6e 67 |viors, d|epending|
|000014c0| 20 6f 6e 20 74 68 65 00 | ed 0c 46 64 61 79 20 6f | on the.|..Fday o|
|000014d0| 66 20 74 68 65 20 77 65 | 65 6b 20 61 6e 64 20 74 |f the we|ek and t|
|000014e0| 68 65 20 74 69 6d 65 2e | 20 59 6f 75 20 6d 61 79 |he time.| You may|
|000014f0| 20 6f 62 73 65 72 76 65 | 20 74 68 65 20 73 63 72 | observe| the scr|
|00001500| 65 65 6e 20 66 61 64 69 | 6e 67 20 69 6e 20 61 6e |een fadi|ng in an|
|00001510| 64 00 fa 0c 47 6f 75 74 | 2c 20 74 68 65 20 77 6f |d...Gout|, the wo|
|00001520| 72 64 20 ff d2 70 69 63 | 6b 6c 65 73 ff d3 20 62 |rd ..pic|kles.. b|
|00001530| 65 69 6e 67 20 74 79 70 | 65 64 20 61 75 74 6f 6d |eing typ|ed autom|
|00001540| 61 74 69 63 61 6c 6c 79 | 2c 20 6f 72 20 73 75 66 |atically|, or suf|
|00001550| 66 65 72 20 61 20 73 79 | 73 74 65 6d 01 07 0c 13 |fer a sy|stem....|
|00001560| 73 68 75 74 64 6f 77 6e | 20 6f 72 20 6c 6f 63 6b |shutdown| or lock|
|00001570| 75 70 2e 01 21 0c 0b c1 | 44 65 74 65 63 74 69 6f |up..!...|Detectio|
|00001580| 6e 3a 01 2e 0d 2f ff a5 | c0 20 53 41 4d 20 64 65 |n:.../..|. SAM de|
|00001590| 74 65 63 74 73 20 74 68 | 65 20 48 43 20 39 35 30 |tects th|e HC 950|
|000015a0| 37 20 76 69 72 75 73 20 | 64 75 72 69 6e 67 20 73 |7 virus |during s|
|000015b0| 63 61 6e 73 2e 01 48 0c | 0e c1 52 65 70 61 72 61 |cans..H.|..Repara|
|000015c0| 62 69 6c 69 74 79 3a 01 | 55 0d 44 ff a5 c0 20 53 |bility:.|U.D... S|
|000015d0| 41 4d 20 65 6c 69 6d 69 | 6e 61 74 65 73 20 74 68 |AM elimi|nates th|
|000015e0| 65 20 76 69 72 75 73 20 | 66 72 6f 6d 20 69 6e 66 |e virus |from inf|
|000015f0| 65 63 74 65 64 20 73 74 | 61 63 6b 73 2e 20 42 65 |ected st|acks. Be|
|00001600| 63 61 75 73 65 20 74 68 | 65 20 76 69 72 75 73 01 |cause th|e virus.|
|00001610| 62 16 45 6d 61 79 20 6f | 76 65 72 77 72 69 74 65 |b.Emay o|verwrite|
|00001620| 20 65 78 69 73 74 69 6e | 67 20 72 65 73 6f 75 72 | existin|g resour|
|00001630| 63 65 73 20 77 68 65 6e | 20 69 6e 66 65 63 74 69 |ces when| infecti|
|00001640| 6e 67 20 61 20 73 74 61 | 63 6b 2c 20 61 20 70 72 |ng a sta|ck, a pr|
|00001650| 65 76 69 6f 75 73 6c 79 | 01 6f 16 43 69 6e 66 65 |eviously|.o.Cinfe|
|00001660| 63 74 65 64 20 73 74 61 | 63 6b 20 6d 61 79 20 6e |cted sta|ck may n|
|00001670| 6f 74 20 72 75 6e 20 70 | 72 6f 70 65 72 6c 79 2e |ot run p|roperly.|
|00001680| 20 49 66 20 70 6f 73 73 | 69 62 6c 65 2c 20 72 65 | If poss|ible, re|
|00001690| 70 6c 61 63 65 20 74 68 | 65 20 73 74 61 63 6b 01 |place th|e stack.|
|000016a0| 7c 16 18 77 69 74 68 20 | 61 6e 20 75 6e 69 6e 66 ||..with |an uninf|
|000016b0| 65 63 74 65 64 20 63 6f | 70 79 2e 01 96 0c 03 53 |ected co|py.....S|
|000016c0| 65 65 81 a3 0c 17 c2 55 | 70 64 61 74 69 6e 67 20 |ee.....U|pdating |
|000016d0| 41 75 74 6f 6d 61 74 69 | 63 61 6c 6c 79 81 b0 0c |Automati|cally...|
|000016e0| 0e c2 4b 6e 6f 77 6e 20 | 56 69 72 75 73 65 73 44 |..Known |VirusesD|
|000016f0| 52 00 06 04 50 00 01 00 | 04 00 06 00 05 00 07 00 |R...P...|........|
|00001700| 00 00 0f 57 6f 72 64 20 | 4d 61 63 72 6f 20 39 35 |...Word |Macro 95|
|00001710| 30 38 00 00 1f 00 0d 0c | 41 c3 54 68 65 c4 20 57 |08......|A.The. W|
|00001720| 6f 72 64 20 4d 61 63 72 | 6f 20 39 35 30 38 c3 20 |ord Macr|o 9508. |
|00001730| 76 69 72 75 73 20 28 61 | 6c 73 6f 20 6b 6e 6f 77 |virus (a|lso know|
|00001740| 6e 20 61 73 20 43 6f 6e | 63 65 70 74 2c 20 50 72 |n as Con|cept, Pr|
|00001750| 61 6e 6b 2c 20 57 57 36 | 29 2c 00 1a 0c 54 c3 64 |ank, WW6|),...T.d|
|00001760| 69 73 63 6f 76 65 72 65 | 64 20 69 6e 20 41 75 67 |iscovere|d in Aug|
|00001770| 75 73 74 20 31 39 39 35 | 2c 20 69 73 20 74 68 65 |ust 1995|, is the|
|00001780| 20 66 69 72 73 74 20 77 | 69 64 65 73 70 72 65 61 | first w|idesprea|
|00001790| 64 20 69 6e 73 74 61 6e | 63 65 20 6f 66 20 61 20 |d instan|ce of a |
|000017a0| 20 76 69 72 75 73 20 72 | 65 73 69 64 69 6e 67 20 | virus r|esiding |
|000017b0| 69 6e 00 27 0c 52 c3 69 | 6e 74 65 72 70 72 65 74 |in.'.R.i|nterpret|
|000017c0| 65 64 20 64 61 74 61 20 | 74 68 61 74 20 63 61 6e |ed data |that can|
|000017d0| 20 73 70 72 65 61 64 20 | 74 6f 20 64 69 66 66 65 | spread |to diffe|
|000017e0| 72 65 6e 74 20 70 6c 61 | 74 66 6f 72 6d 73 2e 20 |rent pla|tforms. |
|000017f0| 54 68 65 20 69 6e 74 65 | 72 70 72 65 74 65 72 2c |The inte|rpreter,|
|00001800| 20 69 6e 20 74 68 69 73 | 00 34 0c 4e c3 63 61 73 | in this|.4.N.cas|
|00001810| 65 2c 20 69 73 20 4d 69 | 63 72 6f 73 6f 66 74 20 |e, is Mi|crosoft |
|00001820| 57 6f 72 64 20 36 2e 30 | 20 6f 72 20 61 6e 79 20 |Word 6.0| or any |
|00001830| 6f 74 68 65 72 20 76 65 | 72 73 69 6f 6e 20 6f 66 |other ve|rsion of|
|00001840| 20 57 6f 72 64 20 74 68 | 61 74 20 73 75 70 70 6f | Word th|at suppo|
|00001850| 72 74 73 20 6d 61 63 72 | 6f 73 00 41 0c 10 c3 61 |rts macr|os.A...a|
|00001860| 6e 64 20 57 6f 72 64 20 | 42 61 73 69 63 2e 00 5b |nd Word |Basic..[|
|00001870| 0c 1a c4 49 6e 66 65 63 | 74 69 6f 6e 20 43 68 61 |...Infec|tion Cha|
|00001880| 72 61 63 74 65 72 69 73 | 74 69 63 73 00 6b 0c 4f |racteris|tics.k.O|
|00001890| c3 54 68 69 73 20 76 69 | 72 75 73 20 64 6f 65 73 |.This vi|rus does|
|000018a0| 20 6e 6f 74 20 73 70 72 | 65 61 64 20 76 69 61 20 | not spr|ead via |
|000018b0| 6d 6f 64 69 66 69 63 61 | 74 69 6f 6e 20 6f 66 20 |modifica|tion of |
|000018c0| 65 78 65 63 75 74 61 62 | 6c 65 20 6d 61 63 68 69 |executab|le machi|
|000018d0| 6e 65 20 63 6f 64 65 2c | 20 62 75 74 20 62 79 00 |ne code,| but by.|
|000018e0| 78 0c 4e c3 6d 6f 64 69 | 66 69 63 61 74 69 6f 6e |x.N.modi|fication|
|000018f0| 20 6f 66 20 64 61 74 61 | 20 66 69 6c 65 73 2e 20 | of data| files. |
|00001900| 41 6e 79 20 73 79 73 74 | 65 6d 73 20 74 68 61 74 |Any syst|ems that|
|00001910| 20 61 72 65 20 63 61 70 | 61 62 6c 65 20 6f 66 20 | are cap|able of |
|00001920| 72 75 6e 6e 69 6e 67 20 | 4d 69 63 72 6f 73 6f 66 |running |Microsof|
|00001930| 74 00 85 0c 4c c3 57 6f | 72 64 20 36 2e 30 20 63 |t...L.Wo|rd 6.0 c|
|00001940| 61 6e 20 62 65 20 61 66 | 66 65 63 74 65 64 20 62 |an be af|fected b|
|00001950| 79 20 74 68 65 20 76 69 | 72 75 73 2e 20 54 72 61 |y the vi|rus. Tra|
|00001960| 6e 73 66 65 72 72 69 6e | 67 20 57 6f 72 64 20 66 |nsferrin|g Word f|
|00001970| 69 6c 65 73 20 62 65 74 | 77 65 65 6e 20 44 4f 53 |iles bet|ween DOS|
|00001980| 2c 00 92 0c 4a c3 4f 53 | 2f 32 2c 20 57 69 6e 64 |,...J.OS|/2, Wind|
|00001990| 6f 77 73 2c 20 4e 54 2c | 20 6f 72 20 6f 74 68 65 |ows, NT,| or othe|
|000019a0| 72 20 6e 6f 6e 2d 4d 61 | 63 20 70 6c 61 74 66 6f |r non-Ma|c platfo|
|000019b0| 72 6d 73 20 61 6e 64 20 | 79 6f 75 72 20 4d 61 63 |rms and |your Mac|
|000019c0| 20 63 61 6e 20 73 70 72 | 65 61 64 20 74 68 65 00 | can spr|ead the.|
|000019d0| 9f 0c 07 c3 76 69 72 75 | 73 2e 00 af 0c 46 c3 54 |....viru|s....F.T|
|000019e0| 68 65 20 76 69 72 75 73 | 20 61 64 64 73 20 73 65 |he virus| adds se|
|000019f0| 76 65 72 61 6c 20 6e 65 | 77 20 6d 61 63 72 6f 73 |veral ne|w macros|
|00001a00| 20 74 6f 20 74 68 65 20 | 67 6c 6f 62 61 6c 20 6d | to the |global m|
|00001a10| 61 63 72 6f 20 70 6f 6f | 6c 3a 20 22 41 41 41 5a |acro poo|l: "AAAZ|
|00001a20| 41 30 22 2c 00 bc 0c 4d | c3 22 41 41 41 5a 46 53 |A0",...M|."AAAZFS|
|00001a30| 22 2c 20 22 50 61 79 6c | 6f 61 64 22 20 61 6e 64 |", "Payl|oad" and|
|00001a40| 20 6f 6e 65 20 65 6e 74 | 69 74 6c 65 64 20 22 46 | one ent|itled "F|
|00001a50| 69 6c 65 53 61 76 65 41 | 73 22 2e 20 54 68 65 20 |ileSaveA|s". The |
|00001a60| 76 69 72 75 73 20 69 73 | 20 61 63 74 69 76 61 74 |virus is| activat|
|00001a70| 65 64 20 69 6e 00 c9 0c | 4e c3 61 6e 20 69 6e 66 |ed in...|N.an inf|
|00001a80| 65 63 74 65 64 20 66 69 | 6c 65 20 77 68 65 6e 20 |ected fi|le when |
|00001a90| 79 6f 75 20 63 68 6f 6f | 73 65 20 74 68 65 20 22 |you choo|se the "|
|00001aa0| 53 61 76 65 20 41 73 22 | 20 66 65 61 74 75 72 65 |Save As"| feature|
|00001ab0| 20 69 6e 20 74 68 65 20 | 22 46 69 6c 65 22 20 6d | in the |"File" m|
|00001ac0| 65 6e 75 20 61 6e 64 00 | d6 0c 51 c3 74 68 65 20 |enu and.|..Q.the |
|00001ad0| 76 69 72 75 73 20 6d 61 | 63 72 6f 20 69 73 20 72 |virus ma|cro is r|
|00001ae0| 75 6e 2e 20 54 68 65 20 | 61 6c 74 65 72 65 64 20 |un. The |altered |
|00001af0| 6d 61 63 72 6f 73 20 61 | 72 65 20 74 68 65 6e 20 |macros a|re then |
|00001b00| 73 61 76 65 64 20 77 69 | 74 68 20 74 68 65 20 66 |saved wi|th the f|
|00001b10| 69 6c 65 2c 20 61 6e 64 | 20 6d 61 79 00 e3 0c 2e |ile, and| may....|
|00001b20| c3 62 65 20 73 61 76 65 | 64 20 69 6e 20 74 68 65 |.be save|d in the|
|00001b30| 20 67 6c 6f 62 61 6c 20 | 74 65 6d 70 6c 61 74 65 | global |template|
|00001b40| 20 66 69 6c 65 20 61 73 | 20 77 65 6c 6c 2e 00 f3 | file as| well...|
|00001b50| 0c 50 c3 54 68 65 20 76 | 69 72 75 73 20 6d 61 79 |.P.The v|irus may|
|00001b60| 20 63 61 75 73 65 20 74 | 68 65 20 61 70 70 65 61 | cause t|he appea|
|00001b70| 72 61 6e 63 65 20 6f 66 | 20 61 6e 20 61 6c 65 72 |rance of| an aler|
|00001b80| 74 20 77 69 6e 64 6f 77 | 20 77 69 74 68 20 74 68 |t window| with th|
|00001b90| 65 20 64 69 67 69 74 20 | 22 31 22 20 69 6e 20 69 |e digit |"1" in i|
|00001ba0| 74 2e 01 00 0c 52 c3 4f | 6e 20 4d 61 63 73 2c 20 |t....R.O|n Macs, |
|00001bb0| 69 74 20 6d 61 79 20 61 | 6c 73 6f 20 63 61 75 73 |it may a|lso caus|
|00001bc0| 65 20 69 6e 66 65 63 74 | 65 64 20 66 69 6c 65 73 |e infect|ed files|
|00001bd0| 20 74 6f 20 62 65 20 73 | 61 76 65 64 20 61 73 20 | to be s|aved as |
|00001be0| 74 65 6d 70 6c 61 74 65 | 73 20 6e 6f 20 6d 61 74 |template|s no mat|
|00001bf0| 74 65 72 20 77 68 61 74 | 01 0d 0c 31 c3 66 69 6c |ter what|...1.fil|
|00001c00| 65 20 74 79 70 65 20 77 | 61 73 20 73 70 65 63 69 |e type w|as speci|
|00001c10| 66 69 65 64 20 69 6e 20 | 74 68 65 20 22 53 61 76 |fied in |the "Sav|
|00001c20| 65 20 41 73 22 20 64 69 | 61 6c 6f 67 2e 01 27 0c |e As" di|alog..'.|
|00001c30| 0a c4 44 65 74 65 63 74 | 69 6f 6e 01 37 0c 2a ff |..Detect|ion.7.*.|
|00001c40| a5 c3 53 41 4d 20 61 6e | 64 20 53 41 4d 20 49 6e |..SAM an|d SAM In|
|00001c50| 74 65 72 63 65 70 74 20 | 64 65 74 65 63 74 20 74 |tercept |detect t|
|00001c60| 68 65 20 76 69 72 75 73 | 2e 01 51 0c 0d c4 52 65 |he virus|..Q...Re|
|00001c70| 70 61 72 61 62 69 6c 69 | 74 79 01 61 0d 1a ff a5 |parabili|ty.a....|
|00001c80| c3 53 41 4d 20 72 65 70 | 61 69 72 73 20 74 68 69 |.SAM rep|airs thi|
|00001c90| 73 20 76 69 72 75 73 2e | 01 7b 0c 04 c3 53 65 65 |s virus.|.{...See|
|00001ca0| 01 88 0c 01 c3 81 95 0c | 17 c5 55 70 64 61 74 69 |........|..Updati|
|00001cb0| 6e 67 20 41 75 74 6f 6d | 61 74 69 63 61 6c 6c 79 |ng Autom|atically|
|00001cc0| 81 a2 0c 0e c5 4b 6e 6f | 77 6e 20 56 69 72 75 73 |.....Kno|wn Virus|
|00001cd0| 65 73 81 af 0c 10 c2 57 | 6f 72 64 20 4d 61 63 72 |es.....W|ord Macr|
|00001ce0| 6f 20 39 35 30 39 81 bc | 0c 07 c2 43 6f 6c 6f 72 |o 9509..|...Color|
|00001cf0| 73 81 c9 0c 04 c2 44 4d | 56 81 d6 0c 08 c5 46 6f |s.....DM|V.....Fo|
|00001d00| 72 6d 61 74 43 44 52 00 | 06 04 50 00 01 00 03 00 |rmatCDR.|..P.....|
|00001d10| 06 00 05 00 07 00 00 00 | 0f 57 6f 72 64 20 4d 61 |........|.Word Ma|
|00001d20| 63 72 6f 20 39 35 30 39 | 00 00 26 00 0d 0c 43 c3 |cro 9509|..&...C.|
|00001d30| 54 68 65 c4 20 57 6f 72 | 64 20 4d 61 63 72 6f 20 |The. Wor|d Macro |
|00001d40| 39 35 30 39 c3 20 76 69 | 72 75 73 20 28 61 6c 73 |9509. vi|rus (als|
|00001d50| 6f 20 6b 6e 6f 77 6e 20 | 61 73 20 4e 75 63 6c 65 |o known |as Nucle|
|00001d60| 61 72 29 2c 20 64 69 73 | 63 6f 76 65 72 65 64 20 |ar), dis|covered |
|00001d70| 69 6e 00 1a 0c 4e c3 53 | 65 70 74 65 6d 62 65 72 |in...N.S|eptember|
|00001d80| 20 31 39 39 35 2c 20 69 | 6e 66 65 63 74 73 20 4d | 1995, i|nfects M|
|00001d90| 69 63 72 6f 73 6f 66 74 | 20 57 6f 72 64 20 64 6f |icrosoft| Word do|
|00001da0| 63 75 6d 65 6e 74 73 2e | 20 49 74 20 69 73 20 74 |cuments.| It is t|
|00001db0| 68 65 20 66 69 72 73 74 | 20 6d 61 63 72 6f 20 76 |he first| macro v|
|00001dc0| 69 72 75 73 00 27 0c 4e | c3 69 6e 74 65 6e 64 65 |irus.'.N|.intende|
|00001dd0| 64 20 74 6f 20 62 65 20 | 62 6f 74 68 20 6d 61 6c |d to be |both mal|
|00001de0| 69 63 69 6f 75 73 20 61 | 6e 64 20 64 65 73 74 72 |icious a|nd destr|
|00001df0| 75 63 74 69 76 65 2e 20 | 56 69 72 75 73 65 73 20 |uctive. |Viruses |
|00001e00| 6f 66 20 74 68 69 73 20 | 74 79 70 65 20 72 65 73 |of this |type res|
|00001e10| 69 64 65 20 69 6e 00 34 | 0c 51 c3 69 6e 74 65 72 |ide in.4|.Q.inter|
|00001e20| 70 72 65 74 65 64 20 64 | 61 74 61 20 61 6e 64 20 |preted d|ata and |
|00001e30| 63 61 6e 20 73 70 72 65 | 61 64 20 74 6f 20 64 69 |can spre|ad to di|
|00001e40| 66 66 65 72 65 6e 74 20 | 70 6c 61 74 66 6f 72 6d |fferent |platform|
|00001e50| 73 2e 20 54 68 65 20 69 | 6e 74 65 72 70 72 65 74 |s. The i|nterpret|
|00001e60| 65 72 2c 20 69 6e 20 74 | 68 69 73 00 41 0c 4e c3 |er, in t|his.A.N.|
|00001e70| 63 61 73 65 2c 20 69 73 | 20 4d 69 63 72 6f 73 6f |case, is| Microso|
|00001e80| 66 74 20 57 6f 72 64 20 | 36 2e 30 20 6f 72 20 61 |ft Word |6.0 or a|
|00001e90| 6e 79 20 6f 74 68 65 72 | 20 76 65 72 73 69 6f 6e |ny other| version|
|00001ea0| 20 6f 66 20 57 6f 72 64 | 20 74 68 61 74 20 73 75 | of Word| that su|
|00001eb0| 70 70 6f 72 74 73 20 6d | 61 63 72 6f 73 00 4e 0c |pports m|acros.N.|
|00001ec0| 10 c3 61 6e 64 20 57 6f | 72 64 20 42 61 73 69 63 |..and Wo|rd Basic|
|00001ed0| 2e 00 68 0c 1a c4 49 6e | 66 65 63 74 69 6f 6e 20 |..h...In|fection |
|00001ee0| 43 68 61 72 61 63 74 65 | 72 69 73 74 69 63 73 00 |Characte|ristics.|
|00001ef0| 78 0c 4f c3 54 68 69 73 | 20 76 69 72 75 73 20 64 |x.O.This| virus d|
|00001f00| 6f 65 73 20 6e 6f 74 20 | 73 70 72 65 61 64 20 76 |oes not |spread v|
|00001f10| 69 61 20 6d 6f 64 69 66 | 69 63 61 74 69 6f 6e 20 |ia modif|ication |
|00001f20| 6f 66 20 65 78 65 63 75 | 74 61 62 6c 65 20 6d 61 |of execu|table ma|
|00001f30| 63 68 69 6e 65 20 63 6f | 64 65 2c 20 62 75 74 20 |chine co|de, but |
|00001f40| 62 79 00 85 0c 4e c3 6d | 6f 64 69 66 69 63 61 74 |by...N.m|odificat|
|00001f50| 69 6f 6e 20 6f 66 20 64 | 61 74 61 20 66 69 6c 65 |ion of d|ata file|
|00001f60| 73 2e 20 41 6e 79 20 73 | 79 73 74 65 6d 73 20 74 |s. Any s|ystems t|
|00001f70| 68 61 74 20 61 72 65 20 | 63 61 70 61 62 6c 65 20 |hat are |capable |
|00001f80| 6f 66 20 72 75 6e 6e 69 | 6e 67 20 4d 69 63 72 6f |of runni|ng Micro|
|00001f90| 73 6f 66 74 00 92 0c 4c | c3 57 6f 72 64 20 36 2e |soft...L|.Word 6.|
|00001fa0| 30 20 63 61 6e 20 62 65 | 20 61 66 66 65 63 74 65 |0 can be| affecte|
|00001fb0| 64 20 62 79 20 74 68 65 | 20 76 69 72 75 73 2e 20 |d by the| virus. |
|00001fc0| 54 72 61 6e 73 66 65 72 | 72 69 6e 67 20 57 6f 72 |Transfer|ring Wor|
|00001fd0| 64 20 66 69 6c 65 73 20 | 62 65 74 77 65 65 6e 20 |d files |between |
|00001fe0| 44 4f 53 2c 00 9f 0c 4a | c3 4f 53 2f 32 2c 20 57 |DOS,...J|.OS/2, W|
|00001ff0| 69 6e 64 6f 77 73 2c 20 | 4e 54 2c 20 6f 72 20 6f |indows, |NT, or o|
|00002000| 74 68 65 72 20 6e 6f 6e | 2d 4d 61 63 20 70 6c 61 |ther non|-Mac pla|
|00002010| 74 66 6f 72 6d 73 20 61 | 6e 64 20 79 6f 75 72 20 |tforms a|nd your |
|00002020| 4d 61 63 20 63 61 6e 20 | 73 70 72 65 61 64 20 74 |Mac can |spread t|
|00002030| 68 65 00 ac 0c 07 c3 76 | 69 72 75 73 2e 00 bc 0c |he.....v|irus....|
|00002040| 4c c3 54 68 65 20 57 6f | 72 64 20 4d 61 63 72 6f |L.The Wo|rd Macro|
|00002050| 20 39 35 30 39 20 76 69 | 72 75 73 20 61 64 64 73 | 9509 vi|rus adds|
|00002060| 20 73 65 76 65 72 61 6c | 20 6e 65 77 20 6d 61 63 | several| new mac|
|00002070| 72 6f 73 20 74 6f 20 74 | 68 65 20 67 6c 6f 62 61 |ros to t|he globa|
|00002080| 6c 20 6d 61 63 72 6f 20 | 70 6f 6f 6c 3a 00 cc 24 |l macro |pool:..$|
|00002090| 27 c3 41 75 74 6f 45 78 | 65 63 20 20 20 b9 46 69 |'.AutoEx|ec .Fi|
|000020a0| 6c 65 45 78 69 74 20 20 | 20 20 20 20 20 bd 46 69 |leExit | .Fi|
|000020b0| 6c 65 53 61 76 65 41 73 | 00 dc 24 28 c3 41 75 74 |leSaveAs|..$(.Aut|
|000020c0| 6f 4f 70 65 6e 20 20 b8 | 46 69 6c 65 50 72 69 6e |oOpen .|FilePrin|
|000020d0| 74 20 20 20 20 20 bd 49 | 6e 73 65 72 74 50 61 79 |t .I|nsertPay|
|000020e0| 6c 6f 61 64 00 ec 24 39 | c3 44 72 6f 70 53 75 72 |load..$9|.DropSur|
|000020f0| 69 76 20 20 20 20 20 b5 | 46 69 6c 65 50 72 69 6e |iv .|FilePrin|
|00002100| 74 44 65 66 61 75 6c 74 | 20 20 20 20 20 20 20 20 |tDefault| |
|00002110| 20 20 20 20 20 20 20 20 | 20 85 50 61 79 4c 6f 61 | | .PayLoa|
|00002120| 64 00 fc 0c 47 c3 57 68 | 65 6e 20 61 6e 20 69 6e |d...G.Wh|en an in|
|00002130| 66 65 63 74 65 64 20 66 | 69 6c 65 20 69 73 20 6f |fected f|ile is o|
|00002140| 70 65 6e 65 64 2c 20 74 | 68 65 20 76 69 72 75 73 |pened, t|he virus|
|00002150| 20 69 73 20 61 63 74 69 | 76 61 74 65 64 20 61 6e | is acti|vated an|
|00002160| 64 20 73 70 72 65 61 64 | 73 20 74 6f 01 09 0c 4b |d spread|s to...K|
|00002170| c3 75 6e 69 6e 66 65 63 | 74 65 64 20 64 6f 63 75 |.uninfec|ted docu|
|00002180| 6d 65 6e 74 73 2e 20 57 | 68 65 6e 20 74 68 65 20 |ments. W|hen the |
|00002190| 66 69 6c 65 20 69 73 20 | 73 61 76 65 64 20 6f 72 |file is |saved or|
|000021a0| 20 70 72 69 6e 74 65 64 | 2c 20 6f 72 20 79 6f 75 | printed|, or you|
|000021b0| 20 65 78 69 74 20 57 6f | 72 64 2c 01 16 0c 1c c3 | exit Wo|rd,.....|
|000021c0| 6f 74 68 65 72 20 65 76 | 65 6e 74 73 20 61 72 65 |other ev|ents are|
|000021d0| 20 74 72 69 67 67 65 72 | 65 64 2e 01 26 0c 4f c3 | trigger|ed..&.O.|
|000021e0| 46 6f 72 20 65 78 61 6d | 70 6c 65 2c 20 69 66 20 |For exam|ple, if |
|000021f0| 74 68 65 20 64 61 74 65 | 20 69 73 20 41 70 72 69 |the date| is Apri|
|00002200| 6c 20 35 2c 20 57 6f 72 | 64 20 4d 61 63 72 6f 20 |l 5, Wor|d Macro |
|00002210| 39 35 30 39 20 61 74 74 | 65 6d 70 74 73 20 74 6f |9509 att|empts to|
|00002220| 20 64 65 6c 65 74 65 20 | 73 79 73 74 65 6d 01 33 | delete |system.3|
|00002230| 0c 4e c3 66 69 6c 65 73 | 2e 20 41 74 20 63 65 72 |.N.files|. At cer|
|00002240| 74 61 69 6e 20 74 69 6d | 65 73 20 6f 66 20 74 68 |tain tim|es of th|
|00002250| 65 20 64 61 79 2c 20 69 | 74 20 74 72 69 65 73 20 |e day, i|t tries |
|00002260| 74 6f 20 69 6e 73 65 72 | 74 20 61 20 74 72 61 64 |to inser|t a trad|
|00002270| 69 74 69 6f 6e 61 6c 20 | 76 69 72 75 73 20 6f 6e |itional |virus on|
|00002280| 01 40 0c 55 c3 4d 53 2d | 44 4f 53 2d 62 61 73 65 |.@.U.MS-|DOS-base|
|00002290| 64 20 73 79 73 74 65 6d | 73 2e 20 49 66 20 61 20 |d system|s. If a |
|000022a0| 66 69 6c 65 20 69 73 20 | 73 65 6e 74 20 74 6f 20 |file is |sent to |
|000022b0| 74 68 65 20 70 72 69 6e | 74 65 72 20 28 6f 72 20 |the prin|ter (or |
|000022c0| 46 41 58 29 20 64 75 72 | 69 6e 67 20 74 68 65 20 |FAX) dur|ing the |
|000022d0| 6c 61 73 74 20 66 6f 75 | 72 01 4d 0c 4f c3 73 65 |last fou|r.M.O.se|
|000022e0| 63 6f 6e 64 73 20 6f 66 | 20 61 6e 79 20 6d 69 6e |conds of| any min|
|000022f0| 75 74 65 2c 20 74 68 65 | 20 66 6f 6c 6c 6f 77 69 |ute, the| followi|
|00002300| 6e 67 20 74 65 78 74 20 | 69 73 20 61 64 64 65 64 |ng text |is added|
|00002310| 20 74 6f 20 74 68 65 20 | 65 6e 64 20 6f 66 20 74 | to the |end of t|
|00002320| 68 65 20 70 72 69 6e 74 | 6f 75 74 3a 01 5d 24 21 |he print|out:.]$!|
|00002330| c3 41 6e 64 20 66 69 6e | 61 6c 6c 79 20 49 20 77 |.And fin|ally I w|
|00002340| 6f 75 6c 64 20 6c 69 6b | 65 20 74 6f 20 73 61 79 |ould lik|e to say|
|00002350| 3a 01 6d 24 30 c3 53 54 | 4f 50 20 41 4c 4c 20 46 |:.m$0.ST|OP ALL F|
|00002360| 52 45 4e 43 48 20 4e 55 | 43 4c 45 41 52 20 54 45 |RENCH NU|CLEAR TE|
|00002370| 53 54 49 4e 47 20 49 4e | 20 54 48 45 20 50 41 43 |STING IN| THE PAC|
|00002380| 49 46 49 43 21 01 7a 0c | 52 c3 44 75 65 20 64 6f |IFIC!.z.|R.Due do|
|00002390| 20 70 6f 6f 72 20 70 72 | 6f 67 72 61 6d 6d 69 6e | poor pr|ogrammin|
|000023a0| 67 2c 20 66 6f 72 74 75 | 6e 61 74 65 6c 79 2c 20 |g, fortu|nately, |
|000023b0| 6e 6f 74 20 61 6c 6c 20 | 6f 66 20 69 74 73 20 69 |not all |of its i|
|000023c0| 6e 74 65 6e 64 65 64 20 | 65 76 69 6c 73 20 61 72 |ntended |evils ar|
|000023d0| 65 20 72 65 61 6c 69 7a | 65 64 2e 01 94 0c 0a c4 |e realiz|ed......|
|000023e0| 44 65 74 65 63 74 69 6f | 6e 01 a4 0c 2b ff a5 c3 |Detectio|n...+...|
|000023f0| 20 53 41 4d 20 61 6e 64 | 20 53 41 4d 20 49 6e 74 | SAM and| SAM Int|
|00002400| 65 72 63 65 70 74 20 64 | 65 74 65 63 74 20 74 68 |ercept d|etect th|
|00002410| 65 20 76 69 72 75 73 2e | 01 be 0c 0d c4 52 65 70 |e virus.|.....Rep|
|00002420| 61 72 61 62 69 6c 69 74 | 79 01 ce 0d 1c ff a5 c3 |arabilit|y.......|
|00002430| 20 53 41 4d 20 20 72 65 | 70 61 69 72 73 20 74 68 | SAM re|pairs th|
|00002440| 69 73 20 76 69 72 75 73 | 2e 01 e8 0c 04 c3 53 65 |is virus|......Se|
|00002450| 65 01 f5 0c 01 c3 82 02 | 0c 17 c5 55 70 64 61 74 |e.......|...Updat|
|00002460| 69 6e 67 20 41 75 74 6f | 6d 61 74 69 63 61 6c 6c |ing Auto|maticall|
|00002470| 79 82 0f 0c 0e c5 4b 6e | 6f 77 6e 20 56 69 72 75 |y.....Kn|own Viru|
|00002480| 73 65 73 82 1c 0c 10 c2 | 57 6f 72 64 20 4d 61 63 |ses.....|Word Mac|
|00002490| 72 6f 20 39 35 30 38 82 | 29 0c 07 c2 43 6f 6c 6f |ro 9508.|)...Colo|
|000024a0| 72 73 82 36 0c 04 c2 44 | 4d 56 82 43 0c 08 c5 46 |rs.6...D|MV.C...F|
|000024b0| 6f 72 6d 61 74 43 44 52 | 00 06 04 50 00 01 00 03 |ormatCDR|...P....|
|000024c0| 00 04 00 06 00 07 00 00 | 00 03 44 4d 56 00 00 1f |........|..DMV...|
|000024d0| 00 10 0c 42 c3 54 68 65 | c4 20 44 4d 56 c3 20 6f |...B.The|. DMV. o|
|000024e0| 72 c4 20 44 6f 63 75 6d | 65 6e 74 20 4d 61 63 72 |r. Docum|ent Macr|
|000024f0| 6f 20 56 69 72 75 73 c3 | 2c 20 77 68 69 63 68 20 |o Virus.|, which |
|00002500| 69 6e 66 65 63 74 73 20 | 4d 69 63 72 6f 73 6f 66 |infects |Microsof|
|00002510| 74 20 57 6f 72 64 00 1d | 0c 50 c3 64 6f 63 75 6d |t Word..|.P.docum|
|00002520| 65 6e 74 73 2c 20 77 61 | 73 20 64 65 76 65 6c 6f |ents, wa|s develo|
|00002530| 70 65 64 20 69 6e 20 74 | 68 65 20 66 61 6c 6c 20 |ped in t|he fall |
|00002540| 6f 66 20 31 39 39 34 20 | 61 73 20 61 20 74 68 65 |of 1994 |as a the|
|00002550| 6f 72 65 74 69 63 61 6c | 20 65 78 65 72 63 69 73 |oretical| exercis|
|00002560| 65 20 74 6f 20 70 72 6f | 76 65 00 2a 0c 52 c3 74 |e to pro|ve.*.R.t|
|00002570| 68 65 20 70 6f 73 73 69 | 62 69 6c 69 74 79 20 6f |he possi|bility o|
|00002580| 66 20 6d 61 63 72 6f 20 | 76 69 72 75 73 65 73 2e |f macro |viruses.|
|00002590| 20 56 69 72 75 73 65 73 | 20 6f 66 20 74 68 69 73 | Viruses| of this|
|000025a0| 20 74 79 70 65 20 72 65 | 73 69 64 65 20 69 6e 20 | type re|side in |
|000025b0| 69 6e 74 65 72 70 72 65 | 74 65 64 20 64 61 74 61 |interpre|ted data|
|000025c0| 00 37 0c 53 c3 61 6e 64 | 20 63 61 6e 20 73 70 72 |.7.S.and| can spr|
|000025d0| 65 61 64 20 74 6f 20 64 | 69 66 66 65 72 65 6e 74 |ead to d|ifferent|
|000025e0| 20 70 6c 61 74 66 6f 72 | 6d 73 2e 20 54 68 65 20 | platfor|ms. The |
|000025f0| 69 6e 74 65 72 70 72 65 | 74 65 72 2c 20 69 6e 20 |interpre|ter, in |
|00002600| 74 68 69 73 20 63 61 73 | 65 2c 20 69 73 20 4d 69 |this cas|e, is Mi|
|00002610| 63 72 6f 73 6f 66 74 00 | 44 0c 4b c3 57 6f 72 64 |crosoft.|D.K.Word|
|00002620| 20 36 2e 30 20 6f 72 20 | 61 6e 79 20 6f 74 68 65 | 6.0 or |any othe|
|00002630| 72 20 76 65 72 73 69 6f | 6e 20 6f 66 20 57 6f 72 |r versio|n of Wor|
|00002640| 64 20 74 68 61 74 20 73 | 75 70 70 6f 72 74 73 20 |d that s|upports |
|00002650| 6d 61 63 72 6f 73 20 61 | 6e 64 20 57 6f 72 64 20 |macros a|nd Word |
|00002660| 42 61 73 69 63 2e 00 54 | 0c 51 c3 41 66 74 65 72 |Basic..T|.Q.After|
|00002670| 20 74 68 65 20 66 69 72 | 73 74 20 76 69 72 75 73 | the fir|st virus|
|00002680| 20 6f 66 20 74 68 69 73 | 20 74 79 70 65 2c 20 57 | of this| type, W|
|00002690| 6f 72 64 20 4d 61 63 72 | 6f 20 39 35 30 38 20 28 |ord Macr|o 9508 (|
|000026a0| 61 6c 73 6f 20 6b 6e 6f | 77 6e 20 61 73 20 43 6f |also kno|wn as Co|
|000026b0| 6e 63 65 70 74 29 2c 20 | 77 61 73 00 61 0c 4e c3 |ncept), |was.a.N.|
|000026c0| 64 69 73 63 6f 76 65 72 | 65 64 20 69 6e 20 74 68 |discover|ed in th|
|000026d0| 65 20 77 69 6c 64 20 69 | 6e 20 41 75 67 75 73 74 |e wild i|n August|
|000026e0| 20 31 39 39 35 2c 20 44 | 4d 56 20 77 61 73 20 72 | 1995, D|MV was r|
|000026f0| 65 6c 65 61 73 65 64 20 | 62 79 20 69 74 73 20 61 |eleased |by its a|
|00002700| 75 74 68 6f 72 2e 20 52 | 61 74 68 65 72 00 6e 0c |uthor. R|ather.n.|
|00002710| 45 c3 74 68 61 6e 20 63 | 61 75 73 69 6e 67 20 64 |E.than c|ausing d|
|00002720| 61 6d 61 67 65 2c 20 44 | 4d 56 20 65 78 69 73 74 |amage, D|MV exist|
|00002730| 73 2c 20 75 6e 66 6f 72 | 74 75 6e 61 74 65 6c 79 |s, unfor|tunately|
|00002740| 2c 20 61 73 20 61 20 6d | 6f 64 65 6c 20 66 6f 72 |, as a m|odel for|
|00002750| 20 76 69 72 75 73 00 7b | 0c 26 c3 70 72 6f 67 72 | virus.{|.&.progr|
|00002760| 61 6d 6d 65 72 73 20 74 | 6f 20 6c 65 61 72 6e 20 |ammers t|o learn |
|00002770| 61 20 6e 65 77 20 74 65 | 63 68 6e 69 71 75 65 2e |a new te|chnique.|
|00002780| 00 95 0c 1a c4 49 6e 66 | 65 63 74 69 6f 6e 20 43 |.....Inf|ection C|
|00002790| 68 61 72 61 63 74 65 72 | 69 73 74 69 63 73 00 a5 |haracter|istics..|
|000027a0| 0c 4f c3 54 68 69 73 20 | 76 69 72 75 73 20 64 6f |.O.This |virus do|
|000027b0| 65 73 20 6e 6f 74 20 73 | 70 72 65 61 64 20 76 69 |es not s|pread vi|
|000027c0| 61 20 6d 6f 64 69 66 69 | 63 61 74 69 6f 6e 20 6f |a modifi|cation o|
|000027d0| 66 20 65 78 65 63 75 74 | 61 62 6c 65 20 6d 61 63 |f execut|able mac|
|000027e0| 68 69 6e 65 20 63 6f 64 | 65 2c 20 62 75 74 20 62 |hine cod|e, but b|
|000027f0| 79 00 b2 0c 4e c3 6d 6f | 64 69 66 69 63 61 74 69 |y...N.mo|dificati|
|00002800| 6f 6e 20 6f 66 20 64 61 | 74 61 20 66 69 6c 65 73 |on of da|ta files|
|00002810| 2e 20 41 6e 79 20 73 79 | 73 74 65 6d 73 20 74 68 |. Any sy|stems th|
|00002820| 61 74 20 61 72 65 20 63 | 61 70 61 62 6c 65 20 6f |at are c|apable o|
|00002830| 66 20 72 75 6e 6e 69 6e | 67 20 4d 69 63 72 6f 73 |f runnin|g Micros|
|00002840| 6f 66 74 00 bf 0c 4c c3 | 57 6f 72 64 20 36 2e 30 |oft...L.|Word 6.0|
|00002850| 20 63 61 6e 20 62 65 20 | 61 66 66 65 63 74 65 64 | can be |affected|
|00002860| 20 62 79 20 74 68 65 20 | 76 69 72 75 73 2e 20 54 | by the |virus. T|
|00002870| 72 61 6e 73 66 65 72 72 | 69 6e 67 20 57 6f 72 64 |ransferr|ing Word|
|00002880| 20 66 69 6c 65 73 20 62 | 65 74 77 65 65 6e 20 44 | files b|etween D|
|00002890| 4f 53 2c 00 cc 0c 4a c3 | 4f 53 2f 32 2c 20 57 69 |OS,...J.|OS/2, Wi|
|000028a0| 6e 64 6f 77 73 2c 20 4e | 54 2c 20 6f 72 20 6f 74 |ndows, N|T, or ot|
|000028b0| 68 65 72 20 6e 6f 6e 2d | 4d 61 63 20 70 6c 61 74 |her non-|Mac plat|
|000028c0| 66 6f 72 6d 73 20 61 6e | 64 20 79 6f 75 72 20 4d |forms an|d your M|
|000028d0| 61 63 20 63 61 6e 20 73 | 70 72 65 61 64 20 74 68 |ac can s|pread th|
|000028e0| 65 00 d9 0c 07 c3 76 69 | 72 75 73 2e 00 e9 0c 45 |e.....vi|rus....E|
|000028f0| c3 44 4d 56 2c 20 77 68 | 69 63 68 20 61 63 74 69 |.DMV, wh|ich acti|
|00002900| 76 61 74 65 73 20 77 68 | 65 6e 20 61 6e 20 69 6e |vates wh|en an in|
|00002910| 66 65 63 74 65 64 20 64 | 6f 63 75 6d 65 6e 74 20 |fected d|ocument |
|00002920| 69 73 20 63 6c 6f 73 65 | 64 2c 20 61 64 64 73 20 |is close|d, adds |
|00002930| 61 20 6e 65 77 00 f6 0c | 4e c3 6d 61 63 72 6f 2c |a new...|N.macro,|
|00002940| 20 6e 61 6d 65 64 20 22 | 41 75 74 6f 43 6c 6f 73 | named "|AutoClos|
|00002950| 65 2c 22 20 74 6f 20 74 | 68 65 20 67 6c 6f 62 61 |e," to t|he globa|
|00002960| 6c 20 6d 61 63 72 6f 20 | 70 6f 6f 6c 2e 20 49 74 |l macro |pool. It|
|00002970| 73 20 62 65 68 61 76 69 | 6f 72 2c 20 68 6f 77 65 |s behavi|or, howe|
|00002980| 76 65 72 2c 20 69 73 01 | 03 0c 51 c3 6e 6f 74 20 |ver, is.|..Q.not |
|00002990| 64 65 73 74 72 75 63 74 | 69 76 65 2e 20 44 4d 56 |destruct|ive. DMV|
|000029a0| 20 73 69 6d 70 6c 79 20 | 64 69 73 70 6c 61 79 73 | simply |displays|
|000029b0| 20 61 20 73 65 72 69 65 | 73 20 6f 66 20 64 69 61 | a serie|s of dia|
|000029c0| 6c 6f 67 20 62 6f 78 65 | 73 20 74 68 61 74 20 63 |log boxe|s that c|
|000029d0| 68 72 6f 6e 69 63 6c 65 | 20 69 74 73 01 10 0c 46 |hronicle| its...F|
|000029e0| c3 61 63 74 69 76 69 74 | 69 65 73 2e 20 54 68 65 |.activit|ies. The|
|000029f0| 20 20 6c 61 73 74 20 64 | 69 61 6c 6f 67 20 62 65 | last d|ialog be|
|00002a00| 67 69 6e 73 2c 20 22 4d | 61 63 72 6f 20 76 69 72 |gins, "M|acro vir|
|00002a10| 75 73 20 68 61 73 20 62 | 65 65 6e 20 73 70 72 65 |us has b|een spre|
|00002a20| 61 64 2e 2e 2e 22 01 2a | 0c 0a c4 44 65 74 65 63 |ad...".*|...Detec|
|00002a30| 74 69 6f 6e 01 3a 0c 2b | ff a5 c3 20 53 41 4d 20 |tion.:.+|... SAM |
|00002a40| 61 6e 64 20 53 41 4d 20 | 49 6e 74 65 72 63 65 70 |and SAM |Intercep|
|00002a50| 74 20 64 65 74 65 63 74 | 20 74 68 65 20 76 69 72 |t detect| the vir|
|00002a60| 75 73 2e 01 54 0c 0d c4 | 52 65 70 61 72 61 62 69 |us..T...|Reparabi|
|00002a70| 6c 69 74 79 01 61 0c 1c | ff a5 c3 20 53 41 4d 20 |lity.a..|... SAM |
|00002a80| 20 72 65 70 61 69 72 73 | 20 74 68 69 73 20 76 69 | repairs| this vi|
|00002a90| 72 75 73 2e 01 7b 0c 04 | c3 53 65 65 01 88 0c 01 |rus..{..|.See....|
|00002aa0| c3 81 95 0c 17 c5 55 70 | 64 61 74 69 6e 67 20 41 |......Up|dating A|
|00002ab0| 75 74 6f 6d 61 74 69 63 | 61 6c 6c 79 81 a2 0c 0e |utomatic|ally....|
|00002ac0| c5 4b 6e 6f 77 6e 20 56 | 69 72 75 73 65 73 81 af |.Known V|iruses..|
|00002ad0| 0c 10 c2 57 6f 72 64 20 | 4d 61 63 72 6f 20 39 35 |...Word |Macro 95|
|00002ae0| 30 38 81 bc 0c 10 c2 57 | 6f 72 64 20 4d 61 63 72 |08.....W|ord Macr|
|00002af0| 6f 20 39 35 30 39 81 c9 | 0c 07 c2 43 6f 6c 6f 72 |o 9509..|...Color|
|00002b00| 73 81 d6 0c 08 c5 46 6f | 72 6d 61 74 43 44 52 00 |s.....Fo|rmatCDR.|
|00002b10| 06 04 50 00 01 00 03 00 | 04 00 05 00 07 00 00 00 |..P.....|........|
|00002b20| 06 43 6f 6c 6f 72 73 00 | 00 1d 00 0d 0c 4e c3 54 |.Colors.|.....N.T|
|00002b30| 68 65 c4 20 43 6f 6c 6f | 72 73 c3 20 76 69 72 75 |he. Colo|rs. viru|
|00002b40| 73 20 28 61 6c 73 6f 20 | 6b 6e 6f 77 6e 20 61 73 |s (also |known as|
|00002b50| 20 52 61 69 6e 62 6f 77 | 29 2c 20 64 69 73 63 6f | Rainbow|), disco|
|00002b60| 76 65 72 65 64 20 69 6e | 20 4f 63 74 6f 62 65 72 |vered in| October|
|00002b70| 20 6f 66 20 31 39 39 35 | 2c 20 69 73 00 1a 0c 51 | of 1995|, is...Q|
|00002b80| c3 61 20 6d 61 63 72 6f | 20 76 69 72 75 73 20 74 |.a macro| virus t|
|00002b90| 68 61 74 20 69 6e 66 65 | 63 74 73 20 4d 69 63 72 |hat infe|cts Micr|
|00002ba0| 6f 73 6f 66 74 20 57 6f | 72 64 20 64 6f 63 75 6d |osoft Wo|rd docum|
|00002bb0| 65 6e 74 73 2e 20 56 69 | 72 75 73 65 73 20 6f 66 |ents. Vi|ruses of|
|00002bc0| 20 74 68 69 73 20 74 79 | 70 65 20 72 65 73 69 64 | this ty|pe resid|
|00002bd0| 65 00 27 0c 54 c3 69 6e | 20 69 6e 74 65 72 70 72 |e.'.T.in| interpr|
|00002be0| 65 74 65 64 20 64 61 74 | 61 20 61 6e 64 20 63 61 |eted dat|a and ca|
|00002bf0| 6e 20 73 70 72 65 61 64 | 20 74 6f 20 64 69 66 66 |n spread| to diff|
|00002c00| 65 72 65 6e 74 20 70 6c | 61 74 66 6f 72 6d 73 2e |erent pl|atforms.|
|00002c10| 20 54 68 65 20 69 6e 74 | 65 72 70 72 65 74 65 72 | The int|erpreter|
|00002c20| 2c 20 69 6e 20 74 68 69 | 73 00 34 0c 4e c3 63 61 |, in thi|s.4.N.ca|
|00002c30| 73 65 2c 20 69 73 20 4d | 69 63 72 6f 73 6f 66 74 |se, is M|icrosoft|
|00002c40| 20 57 6f 72 64 20 36 2e | 30 20 6f 72 20 61 6e 79 | Word 6.|0 or any|
|00002c50| 20 6f 74 68 65 72 20 76 | 65 72 73 69 6f 6e 20 6f | other v|ersion o|
|00002c60| 66 20 57 6f 72 64 20 74 | 68 61 74 20 73 75 70 70 |f Word t|hat supp|
|00002c70| 6f 72 74 73 20 6d 61 63 | 72 6f 73 00 41 0c 10 c3 |orts mac|ros.A...|
|00002c80| 61 6e 64 20 57 6f 72 64 | 20 42 61 73 69 63 2e 00 |and Word| Basic..|
|00002c90| 5b 0c 1a c4 49 6e 66 65 | 63 74 69 6f 6e 20 43 68 |[...Infe|ction Ch|
|00002ca0| 61 72 61 63 74 65 72 69 | 73 74 69 63 73 00 6b 0c |aracteri|stics.k.|
|00002cb0| 4f c3 54 68 69 73 20 76 | 69 72 75 73 20 64 6f 65 |O.This v|irus doe|
|00002cc0| 73 20 6e 6f 74 20 73 70 | 72 65 61 64 20 76 69 61 |s not sp|read via|
|00002cd0| 20 6d 6f 64 69 66 69 63 | 61 74 69 6f 6e 20 6f 66 | modific|ation of|
|00002ce0| 20 65 78 65 63 75 74 61 | 62 6c 65 20 6d 61 63 68 | executa|ble mach|
|00002cf0| 69 6e 65 20 63 6f 64 65 | 2c 20 62 75 74 20 62 79 |ine code|, but by|
|00002d00| 00 78 0c 4e c3 6d 6f 64 | 69 66 69 63 61 74 69 6f |.x.N.mod|ificatio|
|00002d10| 6e 20 6f 66 20 64 61 74 | 61 20 66 69 6c 65 73 2e |n of dat|a files.|
|00002d20| 20 41 6e 79 20 73 79 73 | 74 65 6d 73 20 74 68 61 | Any sys|tems tha|
|00002d30| 74 20 61 72 65 20 63 61 | 70 61 62 6c 65 20 6f 66 |t are ca|pable of|
|00002d40| 20 72 75 6e 6e 69 6e 67 | 20 4d 69 63 72 6f 73 6f | running| Microso|
|00002d50| 66 74 00 85 0c 4c c3 57 | 6f 72 64 20 36 2e 30 20 |ft...L.W|ord 6.0 |
|00002d60| 63 61 6e 20 62 65 20 61 | 66 66 65 63 74 65 64 20 |can be a|ffected |
|00002d70| 62 79 20 74 68 65 20 76 | 69 72 75 73 2e 20 54 72 |by the v|irus. Tr|
|00002d80| 61 6e 73 66 65 72 72 69 | 6e 67 20 57 6f 72 64 20 |ansferri|ng Word |
|00002d90| 66 69 6c 65 73 20 62 65 | 74 77 65 65 6e 20 44 4f |files be|tween DO|
|00002da0| 53 2c 00 92 0c 4a c3 4f | 53 2f 32 2c 20 57 69 6e |S,...J.O|S/2, Win|
|00002db0| 64 6f 77 73 2c 20 4e 54 | 2c 20 6f 72 20 6f 74 68 |dows, NT|, or oth|
|00002dc0| 65 72 20 6e 6f 6e 2d 4d | 61 63 20 70 6c 61 74 66 |er non-M|ac platf|
|00002dd0| 6f 72 6d 73 20 61 6e 64 | 20 79 6f 75 72 20 4d 61 |orms and| your Ma|
|00002de0| 63 20 63 61 6e 20 73 70 | 72 65 61 64 20 74 68 65 |c can sp|read the|
|00002df0| 00 9f 0c 07 c3 76 69 72 | 75 73 2e 00 af 0c 48 c3 |.....vir|us....H.|
|00002e00| 54 68 65 20 43 6f 6c 6f | 72 73 20 76 69 72 75 73 |The Colo|rs virus|
|00002e10| 2c 20 77 68 69 63 68 20 | 73 70 72 65 61 64 73 20 |, which |spreads |
|00002e20| 6f 6e 20 62 6f 74 68 20 | 4d 61 63 69 6e 74 6f 73 |on both |Macintos|
|00002e30| 68 20 61 6e 64 20 4d 69 | 63 72 6f 73 6f 66 74 20 |h and Mi|crosoft |
|00002e40| 57 69 6e 64 6f 77 73 00 | bc 0c 4a c3 73 79 73 74 |Windows.|..J.syst|
|00002e50| 65 6d 73 2c 20 61 64 64 | 73 20 73 65 76 65 72 61 |ems, add|s severa|
|00002e60| 6c 20 6e 65 77 20 6d 61 | 63 72 6f 73 20 74 6f 20 |l new ma|cros to |
|00002e70| 74 68 65 20 4e 6f 72 6d | 61 6c 20 74 65 6d 70 6c |the Norm|al templ|
|00002e80| 61 74 65 2e 20 54 68 65 | 73 65 20 6d 61 63 72 6f |ate. The|se macro|
|00002e90| 73 20 63 61 6e 00 c9 0c | 4d c3 73 70 72 65 61 64 |s can...|M.spread|
|00002ea0| 20 74 6f 20 6f 74 68 65 | 72 20 64 6f 63 75 6d 65 | to othe|r docume|
|00002eb0| 6e 74 73 20 61 73 20 77 | 65 6c 6c 2e 20 57 68 65 |nts as w|ell. Whe|
|00002ec0| 6e 20 61 6e 20 69 6e 66 | 65 63 74 65 64 20 66 69 |n an inf|ected fi|
|00002ed0| 6c 65 20 69 73 20 6f 70 | 65 6e 65 64 2c 20 63 72 |le is op|ened, cr|
|00002ee0| 65 61 74 65 64 2c 00 d6 | 0c 4e c3 73 61 76 65 64 |eated,..|.N.saved|
|00002ef0| 2c 20 6f 72 20 63 6c 6f | 73 65 64 2c 20 6f 72 20 |, or clo|sed, or |
|00002f00| 77 68 65 6e 20 6d 61 63 | 72 6f 73 20 61 72 65 20 |when mac|ros are |
|00002f10| 61 63 63 65 73 73 65 64 | 2c 20 74 68 65 20 76 69 |accessed|, the vi|
|00002f20| 72 75 73 20 6d 61 63 72 | 6f 73 20 61 72 65 20 65 |rus macr|os are e|
|00002f30| 78 65 63 75 74 65 64 2e | 00 e6 0c 46 c3 4f 6e 20 |xecuted.|...F.On |
|00002f40| 61 20 4d 69 63 72 6f 73 | 6f 66 74 20 57 69 6e 64 |a Micros|oft Wind|
|00002f50| 6f 77 73 20 73 79 73 74 | 65 6d 2c 20 74 68 65 20 |ows syst|em, the |
|00002f60| 73 79 73 74 65 6d 20 63 | 6f 6c 6f 72 73 20 61 72 |system c|olors ar|
|00002f70| 65 20 63 68 61 6e 67 65 | 64 20 72 61 6e 64 6f 6d |e change|d random|
|00002f80| 6c 79 00 f3 0c 32 c3 77 | 68 65 6e 65 76 65 72 20 |ly...2.w|henever |
|00002f90| 74 68 65 20 76 69 72 75 | 73 20 6d 61 63 72 6f 73 |the viru|s macros|
|00002fa0| 20 61 72 65 20 65 78 65 | 63 75 74 65 64 20 33 30 | are exe|cuted 30|
|00002fb0| 30 20 74 69 6d 65 73 2e | 01 0d 0c 0a c4 44 65 74 |0 times.|.....Det|
|00002fc0| 65 63 74 69 6f 6e 01 1d | 0c 2b ff a5 c3 20 53 41 |ection..|.+... SA|
|00002fd0| 4d 20 61 6e 64 20 53 41 | 4d 20 49 6e 74 65 72 63 |M and SA|M Interc|
|00002fe0| 65 70 74 20 64 65 74 65 | 63 74 20 74 68 65 20 76 |ept dete|ct the v|
|00002ff0| 69 72 75 73 2e 01 37 0c | 0d c4 52 65 70 61 72 61 |irus..7.|..Repara|
|00003000| 62 69 6c 69 74 79 01 47 | 0d 1b ff a5 c3 20 53 41 |bility.G|..... SA|
|00003010| 4d 20 72 65 70 61 69 72 | 73 20 74 68 69 73 20 76 |M repair|s this v|
|00003020| 69 72 75 73 2e 01 61 0c | 04 c3 53 65 65 01 6e 0c |irus..a.|..See.n.|
|00003030| 01 c3 81 7b 0c 17 c5 55 | 70 64 61 74 69 6e 67 20 |...{...U|pdating |
|00003040| 41 75 74 6f 6d 61 74 69 | 63 61 6c 6c 79 81 88 0c |Automati|cally...|
|00003050| 0e c5 4b 6e 6f 77 6e 20 | 56 69 72 75 73 65 73 81 |..Known |Viruses.|
|00003060| 95 0c 10 c2 57 6f 72 64 | 20 4d 61 63 72 6f 20 39 |....Word| Macro 9|
|00003070| 35 30 38 81 a2 0c 10 c2 | 57 6f 72 64 20 4d 61 63 |508.....|Word Mac|
|00003080| 72 6f 20 39 35 30 39 81 | af 0c 04 c2 44 4d 56 81 |ro 9509.|....DMV.|
|00003090| bc 0c 08 c5 46 6f 72 6d | 61 74 43 44 52 00 06 04 |....Form|atCDR...|
|000030a0| 50 00 01 00 03 00 04 00 | 05 00 06 00 00 00 07 46 |P.......|.......F|
|000030b0| 6f 72 6d 61 74 43 00 00 | 1a 00 0d 0c 55 c3 54 68 |ormatC..|....U.Th|
|000030c0| 65 c4 20 46 6f 72 6d 61 | 74 43 c3 20 76 69 72 75 |e. Forma|tC. viru|
|000030d0| 73 20 69 73 20 6e 6f 74 | 20 74 72 75 6c 79 20 61 |s is not| truly a|
|000030e0| 20 76 69 72 75 73 2c 20 | 62 75 74 20 61 20 54 72 | virus, |but a Tr|
|000030f0| 6f 6a 61 6e 20 48 6f 72 | 73 65 2e 20 49 74 20 69 |ojan Hor|se. It i|
|00003100| 73 20 61 20 4d 69 63 72 | 6f 73 6f 66 74 20 57 6f |s a Micr|osoft Wo|
|00003110| 72 64 00 1a 0c 41 c3 64 | 6f 63 75 6d 65 6e 74 20 |rd...A.d|ocument |
|00003120| 63 6f 6e 74 61 69 6e 69 | 6e 67 20 6f 6e 65 20 6d |containi|ng one m|
|00003130| 61 63 72 6f 2c 20 65 6e | 74 69 74 6c 65 64 20 41 |acro, en|titled A|
|00003140| 75 74 6f 4f 70 65 6e 2c | 20 77 68 69 63 68 20 6c |utoOpen,| which l|
|00003150| 61 75 6e 63 68 65 73 00 | 27 0c 50 c3 61 75 74 6f |aunches.|'.P.auto|
|00003160| 6d 61 74 69 63 61 6c 6c | 79 20 77 68 65 6e 65 76 |maticall|y whenev|
|00003170| 65 72 20 61 20 64 6f 63 | 75 6d 65 6e 74 20 69 73 |er a doc|ument is|
|00003180| 20 6f 70 65 6e 65 64 20 | 2e 20 54 68 65 20 69 6e | opened |. The in|
|00003190| 74 65 72 70 72 65 74 65 | 72 2c 20 69 6e 20 74 68 |terprete|r, in th|
|000031a0| 69 73 20 63 61 73 65 2c | 20 69 73 00 34 0c 4e c3 |is case,| is.4.N.|
|000031b0| 4d 69 63 72 6f 73 6f 66 | 74 20 57 6f 72 64 20 36 |Microsof|t Word 6|
|000031c0| 2e 30 20 6f 72 20 61 6e | 79 20 6f 74 68 65 72 20 |.0 or an|y other |
|000031d0| 76 65 72 73 69 6f 6e 20 | 6f 66 20 57 6f 72 64 20 |version |of Word |
|000031e0| 74 68 61 74 20 73 75 70 | 70 6f 72 74 73 20 6d 61 |that sup|ports ma|
|000031f0| 63 72 6f 73 20 61 6e 64 | 20 57 6f 72 64 00 41 0c |cros and| Word.A.|
|00003200| 49 c3 42 61 73 69 63 2e | 20 54 68 65 20 6d 61 63 |I.Basic.| The mac|
|00003210| 72 6f 20 69 73 20 74 61 | 67 67 65 64 20 22 45 78 |ro is ta|gged "Ex|
|00003220| 65 63 75 74 65 4f 6e 6c | 79 22 20 77 68 69 63 68 |ecuteOnl|y" which|
|00003230| 20 6d 65 61 6e 73 20 69 | 74 20 69 73 20 61 75 74 | means i|t is aut|
|00003240| 6f 6d 61 74 69 63 61 6c | 6c 79 00 4e 0c 50 c3 65 |omatical|ly.N.P.e|
|00003250| 6e 63 72 79 70 74 65 64 | 20 62 79 20 4d 69 63 72 |ncrypted| by Micr|
|00003260| 6f 73 6f 66 74 20 57 6f | 72 64 2e 20 49 74 20 69 |osoft Wo|rd. It i|
|00003270| 73 20 74 68 65 72 65 66 | 6f 72 65 20 75 6e 61 76 |s theref|ore unav|
|00003280| 61 69 6c 61 62 6c 65 20 | 66 6f 72 20 76 69 65 77 |ailable |for view|
|00003290| 69 6e 67 20 6f 72 20 65 | 64 69 74 69 6e 67 00 5b |ing or e|diting.[|
|000032a0| 0c 34 c3 64 65 73 70 69 | 74 65 20 74 68 65 20 66 |.4.despi|te the f|
|000032b0| 61 63 74 20 74 68 61 74 | 20 69 74 20 61 70 70 65 |act that| it appe|
|000032c0| 61 72 73 20 69 6e 20 74 | 68 65 20 6d 61 63 72 6f |ars in t|he macro|
|000032d0| 20 6c 69 73 74 2e 00 75 | 0c 1a c4 49 6e 66 65 63 | list..u|...Infec|
|000032e0| 74 69 6f 6e 20 43 68 61 | 72 61 63 74 65 72 69 73 |tion Cha|racteris|
|000032f0| 74 69 63 73 00 85 0c 45 | c3 41 6e 79 20 73 79 73 |tics...E|.Any sys|
|00003300| 74 65 6d 73 20 63 61 70 | 61 62 6c 65 20 6f 66 20 |tems cap|able of |
|00003310| 72 75 6e 6e 69 6e 67 20 | 4d 69 63 72 6f 73 6f 66 |running |Microsof|
|00003320| 74 20 57 6f 72 64 20 36 | 2e 30 20 63 61 6e 20 62 |t Word 6|.0 can b|
|00003330| 65 20 61 66 66 65 63 74 | 65 64 20 62 79 00 92 0c |e affect|ed by...|
|00003340| 4f c3 46 6f 72 6d 61 74 | 43 2e 20 42 65 63 61 75 |O.Format|C. Becau|
|00003350| 73 65 20 69 74 20 69 73 | 20 61 20 54 72 6f 6a 61 |se it is| a Troja|
|00003360| 6e 20 48 6f 72 73 65 20 | 61 6e 64 20 6e 6f 74 20 |n Horse |and not |
|00003370| 61 20 76 69 72 75 73 2c | 20 46 6f 72 6d 61 74 43 |a virus,| FormatC|
|00003380| 20 63 61 6e 6e 6f 74 20 | 61 6e 64 20 77 69 6c 6c | cannot |and will|
|00003390| 00 9f 0c 4b c3 6e 6f 74 | 20 72 65 70 6c 69 63 61 |...K.not| replica|
|000033a0| 74 65 2e 20 48 6f 77 65 | 76 65 72 2c 20 69 74 20 |te. Howe|ver, it |
|000033b0| 63 61 6e 20 77 72 65 61 | 6b 20 67 72 65 61 74 20 |can wrea|k great |
|000033c0| 68 61 76 6f 63 20 6f 6e | 20 61 6e 20 75 6e 70 72 |havoc on| an unpr|
|000033d0| 6f 74 65 63 74 65 64 20 | 73 79 73 74 65 6d 2e 00 |otected |system..|
|000033e0| af 0c 4b c3 4f 6e 20 61 | 20 4d 69 63 72 6f 73 6f |..K.On a| Microso|
|000033f0| 66 74 20 57 69 6e 64 6f | 77 73 20 73 79 73 74 65 |ft Windo|ws syste|
|00003400| 6d 2c 20 74 68 65 20 6d | 61 63 72 6f 20 61 74 74 |m, the m|acro att|
|00003410| 65 6d 70 74 73 20 74 6f | 20 66 6f 72 6d 61 74 20 |empts to| format |
|00003420| 74 68 65 20 22 43 22 20 | 64 72 69 76 65 2e 00 bc |the "C" |drive...|
|00003430| 0c 4a c3 4f 6e 20 61 20 | 4d 61 63 69 6e 74 6f 73 |.J.On a |Macintos|
|00003440| 68 2c 20 74 68 65 20 46 | 6f 72 6d 61 74 43 20 54 |h, the F|ormatC T|
|00003450| 72 6f 6a 61 6e 20 48 6f | 72 73 65 20 63 61 75 73 |rojan Ho|rse caus|
|00003460| 65 73 20 74 68 65 20 6d | 65 73 73 61 67 65 20 22 |es the m|essage "|
|00003470| 54 68 65 20 45 6e 76 69 | 72 6f 6e 24 00 c9 0c 48 |The Envi|ron$...H|
|00003480| c3 73 74 61 74 65 6d 65 | 6e 74 20 69 73 20 6e 6f |.stateme|nt is no|
|00003490| 74 20 61 76 61 69 6c 61 | 62 6c 65 20 66 6f 72 20 |t availa|ble for |
|000034a0| 57 6f 72 64 20 66 6f 72 | 20 74 68 65 20 4d 61 63 |Word for| the Mac|
|000034b0| 69 6e 74 6f 73 68 22 20 | 74 6f 20 62 65 20 64 69 |intosh" |to be di|
|000034c0| 73 70 6c 61 79 65 64 2e | 00 e3 0c 0a c4 44 65 74 |splayed.|.....Det|
|000034d0| 65 63 74 69 6f 6e 00 f3 | 0c 33 ff a5 c3 20 53 41 |ection..|.3... SA|
|000034e0| 4d 20 61 6e 64 20 53 41 | 4d 20 49 6e 74 65 72 63 |M and SA|M Interc|
|000034f0| 65 70 74 20 64 65 74 65 | 63 74 20 74 68 69 73 20 |ept dete|ct this |
|00003500| 54 72 6f 6a 61 6e 20 48 | 6f 72 73 65 2e 01 0d 0c |Trojan H|orse....|
|00003510| 0d c4 52 65 70 61 72 61 | 62 69 6c 69 74 79 01 1d |..Repara|bility..|
|00003520| 0d 22 ff a5 c3 20 53 41 | 4d 20 72 65 70 61 69 72 |."... SA|M repair|
|00003530| 73 20 74 68 69 73 20 54 | 72 6f 6a 61 6e 20 48 6f |s this T|rojan Ho|
|00003540| 72 73 65 2e 01 37 0c 04 | c3 53 65 65 01 44 0c 01 |rse..7..|.See.D..|
|00003550| c3 81 51 0c 17 c5 55 70 | 64 61 74 69 6e 67 20 41 |..Q...Up|dating A|
|00003560| 75 74 6f 6d 61 74 69 63 | 61 6c 6c 79 81 5e 0c 0e |utomatic|ally.^..|
|00003570| c5 4b 6e 6f 77 6e 20 56 | 69 72 75 73 65 73 81 6b |.Known V|iruses.k|
|00003580| 0c 10 c2 57 6f 72 64 20 | 4d 61 63 72 6f 20 39 35 |...Word |Macro 95|
|00003590| 30 38 81 78 0c 10 c2 57 | 6f 72 64 20 4d 61 63 72 |08.x...W|ord Macr|
|000035a0| 6f 20 39 35 30 39 81 85 | 0c 04 c2 44 4d 56 81 92 |o 9509..|...DMV..|
|000035b0| 0c 07 c5 43 6f 6c 6f 72 | 73 |...Color|s |
+--------+-------------------------+-------------------------+--------+--------+
