Virus Database

Joke.Win32.DesktopPuzzle

Description Joke.Win32.DesktopPuzzle

text written by Alexey Podrezov, Data Fellows
This is a Trojan written in Delphi. The original file name is SLIDESCR.EXE. Upon being executed under Windows 95, it blocks the task manager and opens a messagebox with the following text:
Slider 1.0
Oops, looks like somebody doesn't like you very much !
You have to finish this sliding tile puzzle before you
can continue whatever it is you're doing !
Use the cursor keys to move the pieces (black piece is
the empty one).

After 'OK' is pressed, the Trojan splits the Windows desktop into several parts, mixes them and waits for the user to restore the original desktop by solving the sliding tile puzzle. It also swaps functions of the cursor keys: 'Up' becomes 'Down', 'Left' becomes 'Right' and this makes solving the puzzle more difficult. There's no way to continue working with other Windows applications until you complete the puzzle.
Under Windows NT, the task manager is not blocked by the Trojan, and the puzzle task could be killed.
If the Trojan is executed from a DOS session (full screen mode), the desktop data is not acquired correctly and the puzzle parts are blank. This happens because the desktop image is acquired by the Trojan before Windows switches from the DOS screen to its desktop.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Tear

Description Macro.Word.Tear

This is an encrypted macro virus. It contains two macros: AutoOpen and FileSaveAs. The virus infects the global macros area on opening an infected document (AutoOpen) and writes itself to documents on saving them with new name (FileSaveAs). While opening any document the virus displays the MessageBox:
!
Tear it up!

The virus also contains the commented text:
(c) 1997 Master of Infection
QUEEN FOREVER!!!

Macro.Word.Tedious

Description Macro.Word.Tedious

This virus contains four macros: AutoNew, vAutoNew, FileSaveAs, vFileSaveAs. It infects the global macros area and documents on both AutoNew and FileSaveAs calls. The virus does not manifest itself in any way.

Home