
 AntiViral Toolkit Pro for Microsoft Word (AVPWW)
 ------------------------------------------------
                   1.02


  ᮤন ⨢ ⨫ ⨢  ᮢ, ࠦ
䠩 ଠ Microsoft Word.   ࠭  FREEWARE.

 ⮣, ⮡ 㡥   ᢮ Microsoft Word 筮
㧨  Word 䠩 AVPWW102.DOC. ᫨ Word 㦥 ࠦ, AVPWW 뤠
ᮮ⢥饥 ᮮ饭.  ⮣, ⮡ ஢  䠩 " ",
室 ⠫஢ AVPWW  Word (. 䠩 AVPWW102.DOC).

 ⮣, ⮡   ࠦ 䠩, ᫥ ᯮ짮
⨢᭮   WINWORD.AVP   AVP  ० Redundant.
⥬  ࠦ 䠩     Word. AVPWW
⮬᪨  .


 ন 
 -----------------

  祭 䠩:

 AVPWW102.TXT -  䠩
 AVPWW102.DOC - ⨢᭠ ⨫
 WINWORD.AVB  - ⨢᭠    AVP for DOS
 FILE_ID_DIZ  - 䠩-ᠭ  BBS


 , ࠦ騥 䠩-㬥
 ----------------------------------

 , ࠦ騥 DOC-䠩 ଠ Microsoft Word ver.6. 
ࠦ ⥬ ந室   ࠦ DOC-䠩. 
᫥ ࠦ  뢠    ᮧ DOC-䠩.

 ஦  㬥⠬,   砥!


 ⨨ 㬥 Word 뢠  㬥. ᫨ 㬥
ࠦ,  Word 뢠 ࠦ , .. ᮤঠ騥  .
 ७ ᢮     ᮢ, ।
 FileSaveAs,  ⥬  ᢮    DOC-䠩,
࠭塞 १  "Save As".

 室  Word   ( ) ⮬᪨
뢠  DOT-䠩  ᮢ.  ࠧ,  ᫥饬
᪥ Word  ⨢   ,  Word 㧨
 , .. ࠧ.

   Word  ᮢ⨬  樮묨 ( ⮬ ᫥ 
᪮) ﬨ Word,  -⠪ ᫥ ஢ 室騥 䠩.


  WinWord.Concept (aka WW6Macro)
 ------------------------------------

 ࠦ 䠩  ப:

 see if we're already installed
 iWW6IInstance
 AAAZFS
 AAAZAO
 That's enough to prove my point

  㣨.

 ࠦ ⥬  䠩 WINWORD6.INI  ப

 WW6I= 1

 ࢮ ᪥  (..  ࢮ ᬮ ࠦ 䠩)
 MessageBox  ன 1 .


  WinWord.Nuclear
 ---------------------

 WinWord.Nuclear ࠦ 䠩-㬥 ଠ Microsoft Word 
䠩 ଠ COM, EXE  NewEXE (Windows).

 ࠦ 䠩-㬥  ᮤন   ஢
ᮢ.   䠩-㬥  ⠪  ᪠ ,
ࠦ騩 COM, EXE  NewEXE 䠩.

 ࠦ COM, EXE  NewEXE 䠩  뢠   . 
  䠩   ﭨ ࠦ 䠩-㬥.

ࠦ 䠩-㬥⮢:

ࠦ Microsoft Word ந室  ⨨ ࠦ
䠩-㬥.  ᮤন  "AutoOpen",  ⮬᪨
砥 ࠢ  ⨨ ࠦ 䠩 (᫨   
饭   ⥬  "DisableAutoMacros").

  "AutoOpen" ஢ Microsoft Word  稥 
"AutoExec", , ᫨ ⠪  ,   ᯨ᮪ 
:

 AutoExec, AutoOpen, FileSaveAs, FilePrint, FilePrintDefault,
 InsertPayload, Payload, DropSuriv, FileExit

᫨   ⠪  㦥 뫨 ।,    
᢮ ᠬ.  ⮬ ࢮ砫  㭨⮦.

 쭥襬 䠩-㬥 ࠦ   ⨨ ( 믮
 "FileSaveAs").


:

  䠩-㬥  ६ ᯮᮡ: 1) ᪠
COM/EXE/NewEXE , 2)  ப ⥪   㬥⮢,
3)  ⥬ 䠩.

1)  ⨢騥  뢠  "DropSuriv", 
஢ ⥬ ६   ਮ  17:00  18:00 ࠦ ⥬
DOS-ᮬ.  ⮬  "DropSuriv" ᯮ ணࠬ DEBUG.EXE.

  ஢ 稥 䠩 C:\DOS\DEBUG.EXE. ᫨ ⠪
,   ᮧ ६ 䠩 PH33R.SCR  ⠫ C:\DOS.
  䠩 뢠 ⭠     ணࠬ
DEBUG (ᮧ 䠩,  ⭠ , 믮 祭
,   DOS). ⥬  ᮧ ६ 䠩 EXEC_PH.BAT, 㤠
뢠 ப:

 @echo off
 debug < ph33r.scr > nul

 믮  BAT-䠩.  १ ணࠬ DEBUG ᮧ 
 ( )  믮 .  墠뢠 INT 21h  ⥬
ࠦ 믮塞 䠩.

 BAT-䠩 ந室  ⥭ ०, ⠪  짮⥫  
ॢ,    ࠦ, 祬 㦥  ,  
ᠬ.

᫥ ࠡ⪨ BAT-䠩  "DropSuriv" ࠥ 䠩 PH33R.SCR 
EXEC_PH.BAT.


2)   㬥⮢ ਬ୮   12- 䠩 (祭 ᥪ㭤
⥪饣 ६    55)  窨:

 And finally I would like to say:
 STOP ALL FRENCH NUCLEAR TESTING IN THE PACIFIC!

祬 窨    䠩 ।⢥ । , ⠪
 짮⥫, ᪮॥ ᥣ,  㦨   ࠭, ⠪ 
ࠪ᪨  㬥   ࠭ ࠭ (ᮡ ᥫ
 䥪 㤥 룫拉  ࠢ 䠪ᮢ).


3) 5- ५  ᪥ ࠦ Word  ⨨ ࠦ
㬥   䠩 IO.SYS (᭨  ਡ   
䠩), MSDOS.SYS (᭨  ਡ,    .  
  ⠢    ),  ⥬ ࠥ 䠩
COMMAND.COM.


ࠦ 믮塞 䠩:

 ᪥ ࠦ 믮塞 䠩  (,   ᮧ
  DEBUG) 墠뢠 INT 21h  ⠥ १.  ᪥
 䠩 ଠ COM  EXE  ᯮ ⠭ 
ࠦ ,  ᪥  NewEXE-䠩  ᯮ DPMA-맮.

 ᪥, ⨨, २   ਡ⮢ 믮塞
䠩  뢠   .  ⮬  ஢  䠩
 ࠦ ⮫쪮 䠩 *.DL*, *.CO*  *.EX*.   뢠  䠩
*AV.*, *DV.*, *AN.*, *OT.*.

 ࠦ COM  EXE-䠩  ᯮ ⠭ ⮤ -
  䠩  뢠 ᢮    䠩. 
ࠦ NewEXE-䠩  ᤢ NE-  8  ,
頥  ᢮   ਯ ᥣ  뢠 
 䠩.

 COM/EXE/NewEXE-䠩    . ন ப:

 =Ph33r=
 Qark/VLAD


祭:

 ⥫ ᮢ   ࠦ 㬥  ப

 C:\40HEX\WW6INFO.DOC

 ᢨ⥫  ⮬,   襬 ६  ᠭ
ᮢ ⠪ ⨯    ஭ ୠ ᮯ⥫,
 䨪権 ⠪ ᮢ  ⪨  ⭨.


ࠦ 䠩-㬥  㦥  (᪮쪨?) 饤㯭 ftp 
ZIP-䠩 WW6ALERT.ZIP.  ⮬ ZIP ᥣ  䠩:

 FILE_ID.DIZ
 README.TXT
 WW6INFO.DOC

 FILE_ID.DIZ ᮤন ⥪:

 Microsoft Word For Windows Document
 Virus Information.
 URGENT! If you use Microsoft Word
 for Windows 6.0 read this to find
 out about the Winword virus!
 Could you be infected with this
 virus and not know it?
 Downloaded from Microsoft CIS.

 䠩 README.TXT  ⠪ 蠯:

 MICROSOFT CORPORATION                   Customer Information Services.
 TO:         Microsoft Word for Windows v6.0 users.
 SUBJECT:    Winword Prank virus.
 REF:        AN98474.

  䠩 (ࠦ 䠩!) WW6INFO.DOC 室 (!!!!) ⥪  
WW6Macro (WinWord.Concept)   ப:

 Copyright 1995 Eugene V. Kaspersky - All Rights reserved.

 祬 ⠥ ⮫쪮 ᮦ.



  ᨨ AVP Shareware  Updates
 ------------------------------------

ଠ    AVP Shareware   Updates 㯭 
७:

Internet:    relcom.comp.virus     Russia
FidoNet:     AVP.SUPPORT           Russia
             AVP.FR                France

  AVP Shareware   Updates 㯭 :

Anonymous FTP sites:

a) Weekly & Cumulative Updates, Shareware versions:

Server:                        Path:                           Filenames:
===========================================================================

ftp.command-hq.com             /pub/command/avp/               *.*
io.com                         /pub/usr/pmonti/avp/            *.*
ftp.informatik.uni-hamburg.de  /pub/virus/progs/avp/           *.*
sunsite.unc.edu
           /pub/docs/security/hamburg-mirror/virus/progs/avp/  *.*
ftp.sct.fr            /pub/virus/tools/antivirus/avp/updates/  *.*
ftp.sunet.se                   /pub/security/virus/progs/avp/  *.*
ftp.uu.net                     /pub/security/virus/progs/avp/  *.*
ftp.icomm.rnd.su               /ANTIVIRUS/AVP/                 *.*

b) Cumulative Updates and Shareware versions:

Server:                        Path:                           Filenames:
===========================================================================

SimTel:
oak.oakland.edu                /pub/msdos/virus/               avp*.*

SimTel Mirrors:   (a small selection, there are many more)
ftp.switch.ch                  /mirror/simtel/msdos/virus/     avp*.*
ftp.cyf-kr.edu.pl              /pub/mirror/simtel/msdos/virus/ avp*.*
ftp.icm.edu.pl                 /pub/simtel/msdos/virus/        avp*.*
micros.hensa.ac.uk             /mirrors/simtel/msdos/virus/    avp*.*
ftp.ibp.fr                     /pub/pc/SimTel/msdos/virus/     avp*.*
ftp.cs.cuhk.hk                 /pub/simtel/msdos/virus/        avp*.*
ftp.sun.ac.za                  /pub/simtel/msdos/virus/        avp*.*

WWW-Sites:

URL:                                 Desc.                         Lang.
==========================================================================

http://www.marktplatz.ch/metro/      AVP-Information / News, etc.  E/D
http://www.command-hq.com/command    AVP-Information               E
http://www.icomm.rnd.su/icomm/avp/   AVP-Information               R/E

                                         Lang.:  E=English  D=Deutsch (German)
                                                 R=Russian
BBSs:

 Switzerland:
 Metropolitan Network BBS:
 +41 (0)31 348-1331   (2 lines) 2400-33600bps V.34+/V.FC/V.32bis/HST
 +41 (0)31 348-0422   (1 line)  2400-28800bps V.34/V.FC/V.32bis/HST

 Russia:
 +7 (8632) 69-6931 (8 lines) 2400-14400 V32bis
 +7 (095) 278-9949
 +7 (095) 932-8465
 +7 (092) 223-7354



 প 짮⥫
 -----------------------

孨᪨ 樨,      ᨨ ணࠬ
    襣 ਡ,  ண  㯨 ணࠬ.
᮪  ਡ஢ AVP ਢ .


1. ᪢

1.1. -᪢ *
	107589, ᪢, ஢᪠ .,.9
	.  (095) 434-30-69, 434-46-20,434-20-60

1.2. -, *
	115 409, ᪢, ᪢, .31, .2
	. 320- 43-66, 320-32-11
	. 324-30-65, 320-43-44.

1.3.  
	129851, ᪢, 3- 騭᪠ ., .10,
	.. 974-60-06

1.4.   COMPULINK
	᪢, 殢, .85
	.931-92-30, 931-93-34

1.5. Lamport, ⤥ ணࠬ ᯥ祭,
	᪢, . ஢, 14.
	⥫. 125-11-01.

1.6. Steepler, ⤥ ணࠬ ᯥ祭,
	119034 ᪢, ⥭, 40
	.:	245-64 74, 246-14-32.
	䠪: 	246-74-46, 224-10-19, 274-64-74.
	E-mail: software@steeplerd.msk.su

1.7. CPS *,
	᪢, ᪨ ᯥ, 72,
	.. ᪨  졥⮢
	⥫. 930-34-60, 930-05-91.
	fax: 930-05-16.
	E-mail: support@cpsltd.msk.su

1.8. AO "⥬",
	᪢, . 殢, 85.

1.9. "1C".
	123056, / 64, ᪢,
	. 㧨᪠, 64.
	⥫. (095) 253-89-76, 253-89-48
	䠪: 253-09-66.
	E-mail: proi@company-1c.msk.ru


2.㣨 த

2.1. ᨩ. -  
	353 908, ᨩ, , 74
	/a (86134) 20582

2.2 ⮢-- -   *
	344007, ⮢--, .஭ 107/25
	.. (8632) 631-360, 620-562
	. (8632) 69-69-51

2.3. ,
	 ⮬⨧஢  ⥬
	443010, , ᮢ᪠, .62
	.(8462) 33 23 75, 32 14 61
	. (8462) 000344.

2.4.   ⥪ *
	614 600, , . , .13,
	.(342-2) 650437
	. (3442-2) 49 69 03.

2.5. , ଠ ⮭,
	४ 祭  ,
	, . , 14, ᪮ த
	./.	(08 222) 376 52, 376 85.

2.6. ७,  -ࠫ *
        ७᪠    ⠭, 460 000,
	.७, . 誨᪠, 20.
	./䠪: (3532) 47 97 11

2.8., ᪠  ᪠ .   *,
 	. , . 㡫 , 8 .
	. (3452) 26 28 75, 26 23 61.
	: (3452) 26 15 20.

2.9. ᭮-26, ਤ
	66026, .᭮-26, .᪮
	ନ, 30,  4-01.
	. (39197) 344 33.

2.10. ᫠, - *,
 	᫠, .. 150000 .ய, .9/9
	⥫. (0852) 221437, 䠪 (0852) 228650.
	E-mail: postmaster@kami.yaroslavl.su

2.11. . -, *
	᪠ .,170 000, . , 14,
	᪮ த ,
	⥫. (08222) 37652, 䠪 37685.

2.12. ᭮
	-᭮ *, ᭮, ᭮᪠ ., 660097,
	.檮, 61,  㪨  孨.
	⥫./䠪: (3912) 279875, 279482.

2.13. ᨡ.
	-ᨡ *, த᪠ ., 6,
	⥫. (3832) 982318, 352241, 353784,
	䠪 (3832) 981092, 354913.
	E-mail: fen@kami.nsk.su

2.14. .
	.,  - *
	, .쪮, 58, .601
	./. (044) 261-59-24, 261-59-23.

2.15. .
	, ., 18,  2.
	⥫. 	(80172) 666335, 666606 (),
	(80172) 661709 (-), 661609.
	䠪:   (80172) 661709.

2.16. , *
	 "",
	440600  . ᪮᪠, 74.
	⥫. (841-2) 66-25-09.
	E-mail: izhitsa@izhitsa.penza.su

2.17. ஢,
	-⮪, *
	860035, ஢, .宮᪠, 136-.
	⥫. (421) 358-371,
	䠪: (421) 358-630.

2.18. -.*
	. -, ଠ -
	. . , 86.
	⥫. ((812) 312 10 48, 314-1969.
	䠪: (812) 110 6431.

2.19. .
	 "ਠ -",
	672000, . , . 誮-ਣ஢, 4.
	. (30222) 34036, 33600.

______________________________________________________________
* -  ଠ ⢫  孨 প AVP.

