Macro Virus Table - Defense Technical Information Center

The Virus Tables
Name: The name of the
virus used in this report.
Note that virus names are
not unique, and that the
same virus may be known by
more than one name. The
virus descriptions are sorted
alphabetically by the first
name in this field.
Aliases: This field gives the
different names by which the
virus is known, including
different names for the same
virus, and the names of any
nearly identical variants
(clones).
The computer viruses in the first six tables in this document are described in the
format shown below. In most cases, short phrases are used to describe the type,
features, and other characteristics of the virus. The last four tables in this
document expand on the phrases used in the virus tables.
Disk Location: This field describes where the
virus hides on a disk, which is generally the
vehicle by which it is transferred to another
machine. For Trojans, the name of the Trojan
program is also listed here.
Damage: This field describes the intentional
and unintentional damage done by the virus.
Type: The virus is classified here
according to where it hides or how it
attacks a system.
Features: This field describes where the virus
hides in memory and how it infects new disks.
Included here are any special features, such as
encryption and stealth capabilities.
Size: This field
describes any changes
that a virus makes to
other programs and data
on disk, especially
increases in file length.
Not all viruses increase
the length of an infected
10 CIAC Computer Virus Information Update May 21, 1998
file.
See Also: This
field points to
related virus
descriptions that
may contain more
information.
Notes: This field contains descriptive information, information on how to detect and eradicate a
virus, and any information that does not fit in the categories above.