Macro.Word.Nova
Description Macro.Word.Nova
This is an encrypted macro virus. It contains two macros: AutoExit, AutoClose, and infects the global macros area and documents on AutoClose call. On exiting Word on July 28 the virus displays to the StatusBar the text:
+ meu anivers rio
Parab ns para mim!
On other day it displays:
Nova V tima
Fechando 2807M!
Check other viruses! Be aware! Use Antiviral Software
MidInfector.765
Description MidInfector.765
This is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed.
The virus contains the text string:
MidInfector by Dark Slayer of [TPVO]
The virus writes "JMP VirusCode" instruction to the file middle. While infecting the virus reads the file into the system memory, and disassembles the file code instruction-by-instruction (the virus contains primitive disassembler). The disassembler stops at interrupt calls (CD), jumps on condition (Jcc), FAR JMP/CALL, and some other instructions, and the virus overwrites that instruction with "JMP VirusCode".
Midnight.2352
Description Midnight.2352
It is a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of .COM files that are executed or opened. The virus may infect the files in incorrect way, these files halt the system while executing. The virus contains the text strings:
[Midnight] by Antigen/VLAD
Hi Zvi!! Thanks for inspiring the idea :)
|