Fichv Family
Description Fichv Family
These are memory resident dangerous parasitic encrypted viruses. They hook INT 21h, and write themselves into .COM file beginnings. They set the file time to xx1Fh. In March, they erase the content of disks A: and B: if one of them is a current disk. They also contain the string:
*.com COMMAND****FICHV 2.1 vous a eu*****
Fichv.897
This virus infects .EXE files in a standard manner. It contains the text:
*.exe ** FEXE 1.0 vous a eu **
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.MDMA
Description Macro.Word.MDMA
Macro.Word.MDMA is an encrypted virus, it contains only one macro AutoClose and infects the system and files on closing a file.
On 1st of any month the virus corrupts the files depending on the installed system and then display the message box with the text:
MDMA_DMV
You are infected with MDMA_DMV.
Brought to you by MDMA (Many Delinquent Modern Anarchists).
Under Windows the virus deletes the C:SHMK file and overwrites the C:AUTOEXEC.BAT with the commands:
@echo off
deltree /y c:
@echo You have just been phucked over by a virus
As a result after rebooting all files in all subdirectories will be deleted.
Under Windows NT the virus deletes all files in the root directory as well as the C:SHMK file.
Under Macintosh the virus deletes the files in system directory(?).
Under other systems (Windows 95) the virus deletes the C:SHMK file and all *.HLP files in C:WINDOWS directory. The virus then sets some private profile strings and deletes all *.CPL files in C:WINDOWSSYSTEM directory.
Macro.Word.Meldung
Description Macro.Word.Meldung
This virus contains three macros:
Documents NORMAL.DOT
A1 DateiSpeichernUnter
AutoOpen AO1
B1 AutoExec
The virus infects the global macros area on opening an infected document (AutoOpen) and infects documents on saving them with new names (DateiSpeichernUnter - FileSaveAs).
On the 17th of any month the virus displays the MessageBox:
Meldung!
Dark Tremor Virus Copyright 1998 by Dark Tremor
|