Macro.Word.Mota
Description Macro.Word.Mota
This is an encrypted macro virus. It contains five macros: AutoOpen, Autoexec, No2, FileSaveAs, FileExit. On AutoExec and AutoOpen the virus infects the global macros area, the documents get infection on FileSaveAs call. On FileExit the virus disables system warning message on saving NORMAL.DOT and system anti-virus protection, if it exists. On AutoExec, if the system is already infected, the virus appends to the end of current document the text:
Mota grows..
Check other viruses! Be aware! Use Antiviral Software
Mirea Family
Description Mirea Family
These are harmless memory resident parasitic stealth viruses. "Mirea.1766,1773" are the polymorphic ones. They hook INT 9 (keyboard), 21h and write themselves to the end of COM and EXE files that are accessed. After 1000th keys entered via keyboard the viruses start to joke with keyboard buffer: they insert the text in Russian into this buffer. The viruses contain the text strings:
"Mirea.958": HELLO HACKERS FROM MIREA îêÉ¥Ç-II
"Mirea.1086": HELLO HACKERS FROM MIREA îêÉ¥Ç-III
"Mirea.1766": HELLO HACKERS FROM MIREA îêÉ¥Ç-IV
"Mirea.1773": POLYMORPHIC MIREA îêÉ¥Ç-VI
"Mirea.1813": POLYMORPHIC MIREA îêÉ¥Ç-VII
Mirea_II.4157
Description Mirea_II.4157
It is a dangerous nonmemory resident parasitic polymorphic virus. It searches for EXE files and writes itself to the end of the file. While searching and infecting it uses only absolute read/write calls INT 25h/INT 26h. It has the errors and in some cases corrupts the files while infecting them. Depending on its random counter the virus displays the message in Russian.
|
Home
Viruses from A to Z
0-9
A
B
Ñ
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
|