Virus Database

HS.1221

Description HS.1221

This is a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files (except AIDSTEST.EXE) that are executed. On December, 27th it hooks INT 17h and prints the messages in Russian.
The virus contains the text string:
COMSPEC=
SNAIDSTESTCOMEXE
HS86.42 Ver 4.09.Copyright by EA computers inc.1994

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Vovi

Description Macro.Word97.Vovi

This is arather simple macro-virus, containing one macros:
NewMacros
and the following string label:
VoviusFirstMacroVirus

Macro.Word97.Waterfall

Description Macro.Word97.Waterfall

This macro-virus contains two macros, "AutoOpen" and "autonomailer," in one module "waterfall," and replicates upon document opening.
The virus changes the Internet Explorer Startup URL with the new address: "http://www.kevinmitnick.com". The virus also looks for "Internet Mail" active, creates a new message to one of the addresses from the existing list, attaches an active (infected) document, and sends this message. The message Subject field contains the word "Hey," and the message body contains the strings:
Hey
Youve just got to read this!
Peace


Upon infection, the virus checks the current date and time, and in December, if the current time is 12 minutes past the hour, the virus appends to the AUTOEXEC.BAT file commands displaying the following message:
I have committed the sin of hacking and am unfit in the eyes of the Lord.
I confess to acts of witchcraft and art, dissidence and voodoo.
But in my Craft for which you condemn me,
I SURF THE BRAINWAVES OF GOD.

Home