Macro.Word.NOP
Description Macro.Word.NOP
These are silly macro viruses containing two macros. While infecting the system global area (on AutoOpen) or a document (on DateiSpeichern - FileSave) the viruses copy their macros with other names:
NORMAL.DOT Infected files
Macro1 DateiSpeichern NOP
Macro2 NOP AutoOpen
"Nop.d" has other set of names: AutoOpen and FileSave.
The viruses are very short - summary length of their macros is:
"Nop.a" - 246 bytes
"Nop.b" - 250 bytes
"Nop.a" has no destruction or trigger routines. "Nop.b" on FileSaveAs inserts the text "Testvirus" into current document. "Nop.e" searches for the text ". SAP" in the current document and replaces it with ". SÅP".
Check other viruses! Be aware! Use Antiviral Software
PresidentB.1504
Description PresidentB.1504
This is a very dangerous memory resident encrypted multipartite virus. When an infected file is executed, the virus decrypts itself, hooks INT 13h and 21h, and returns control to the host program. While loading from an infected floppy disk, the virus hooks INT 12h and 13h, and waits for the DOS loading process and hooks INT 21h.
The virus then writes itself to the end of COM and EXE files that are executed or loaded as overlays or for debugging. Upon accessing 1.4Mb-floppy disks, the virus infects their boot sectors.
On April 26th, the virus erases the MBR of the hard drive and displays the following message:
** President B ][ **
Press.1024
Description Press.1024
It is a harmless nonmemory resident parasitic virus. It searches for EXE files of the subdirectory tree, then writes itself to the end of the file. In some cases the virus displays:
Press any key
|