Espacio Family
Description Espacio Family
These are not dangerous memory resident parasitic viruses. They hook INT 1Ch, 21h and write themselves to the end of COM- and EXE-files that are executed. These viruses contain the data area that is the code of old game PAC-MAN, and this code is packed by PKLITE utility. These viruses unpack that game and sometimes launch it. On execution of this game the viruses hook INT 09h and on Alt-Ctrl-Del pressing they return control to interrupted program. The code of the game contains the text strings:
Recorre la Habana
Presione la tecla ESPACIO para comenzer
en busca de nuevas aventuras
Copyright: NASA-MAN 1993
Oprima ESPACIO para seguir PAC-MANeando all
oystick button FOR JOYSTICK PUNT.
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Balrog.a
Description Macro.Word.Balrog.a
This is the encrypted macro virus. It contains only one macros "AutoClose" and infects the global macros area and documents on File/Close call. This is a Spain-specific macro virus - it does work only under Spain-Word version. Under other versions it overwrites the C:COMMAND.COM file with a copy of the current document.
Depending on a random counter it appends the text to the end of current document:
P.S.: You are a very stupid people.
P.S.: I hate you a lot.
P.S.: I wish your death.
P.S.: All the things I told you are lies.
P.S.: Call me if you need sex.
Macro.Word.Baluade
Description Macro.Word.Baluade
This is an encrypted macro virus. It contains two macros: AutoOpen, ReadMe. It infects the global macros area on opening an infected document (AutoOpen). The ReadMe macro is copied to the NORMAL.DOT with new name DateiSpeichern. The virus sets two passwords: "SSichliebeDich" and "SSICHLIEBEDICH".
|