Macro.Word.Divina.c
Description Macro.Word.Divina.c
This is an encrypted macro-virus. It contains only one macro - AutoClose.
If current minutes are 17 it displays message box with text:
ROBERTA TI AMO!
Massimo
Hard Disk damaged. Start antivirus ?
Virus 'ROBERTA' is running
Exit from system and low level format are recommended.
Virus stopped
Exit from System ?
Microsoft Windows
Check other viruses! Be aware! Use Antiviral Software
CD_Joke.848
Description CD_Joke.848
It is not a dangerous memory resident parasitic virus. It is encrypted in files as well as in the system memory. It hooks INT 21h and writes itself to the beginning of COM files (except COMMAND.COM) that are executed. To detect its TSR copy the virus calls INT 21h with EAX='PiVO' and compares the returned EAX with 'OUi!'.
If there is a CD drive installed, the virus also hooks INT 16h and depending on its keystrokes counter ejects or closes CD drive.
The virus contains the text string:
CD Joke II by NemO.
CeCe Family
Description CeCe Family
These are not dangerous memory resident parasitic polymorphic viruses. They hook INT 21h and write themselves to the end of COM- and EXE-files the are executed or openend. Depending on their internal counters these viruses call trigger routine launching the "fly" on the screen:
/
=____-
/
These viruses also contain the internal strings:
Welcome to presentation of new program, named Ce-Ce!!!
Can you recognize what does it mean?
1. Do you know the fly living in the Africa?
2. Do you know int3 command opcode?
3. Do you know that 0CCh is equal to 204?
4. Do you know that CC is Computer Center abriviature?
5. Do you know the name of main hero in Santa Barbara?
6. Do you know all
|