EE
Description EE
It's a not dangerous memory resident virus. On loading from infected floppy it infects MBR of hard drive, then it hooks INT 1Ch, waits for DOS loading, then hooks INT 21h and infects floppies on DOS functions SELECT DISK and KEYBOARD INPUT calls (INT 21h, ah=0Eh,0Ah). Depending on current time it displays the 'î' character (ASCII EEh).
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Ultras.Goblin2
Description Macro.Word.Ultras.Goblin2
This virus infects the Word documents. The infection is run on documents opening or closing.
On Tuesday it creates the Zoo.383.b virus dropper on the C: drive, inserts into the C:AUTOEXEC.BAT file the command to execute it and displays the MessageBox:
ULTRASall
GoBLiN II by ULTRAS
Thank you Dirty Nazi [Stealth group WorldWide]
for such beautiful virus.
Macro.Word.Ultras.Joke
Description Macro.Word.Ultras.Joke
These viruses infect the Word documents. The infection is run on documents opening or closing.
The virus sets to "Ultras/Joke/ULTRAS2.usa.net" the Name/Initials/Address in document's UserInfo fields. The virus also makes changes in the Registry:
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersion]
"RegisteredOwner"="ULTRAS"
"RegisteredOrganization"="Rioters"
"ProductName"="JoKe By ULTRaS"
[HKEY_CLASSES_ROOTWORD.DOCUMENT.6DefaultIcon]
C:WindowsSystemShell32.dll,31
[HKEY_CLASSES_ROOTWord.TemplateDefaultIcon]
C:WindowsSystemShell32.dll,32
|