Macro.Word.Stealph
Description Macro.Word.Stealph
This virus contains two macros:
Documents NORMAL.DOT
CSF FileOpen
AutoOpen CS
It replicates on documents opening. The documents->NORMAL.DOT infection routine does not have replicating instructions in its code. Instead of ordinary ways of infection, it creates the temporary CyberShadow macro, fills it with instructions of replication that are stored in virus text constants, executes and then deletes.
The virus contains the comments:
Stealth Wishes by CyberShadowall
Thanks to SGWW !
Check other viruses! Be aware! Use Antiviral Software
Aref.890
Description Aref.890
This is a memory resident parasitic virus. It hooks INT 21h and writes itself to the end of files that are executed. It infects both COM and EXE files.
On Thursdays it also erases the CMOS, hooks INT 1Ch and on each timer tick, displays the following message:
[ AREF V.3.0 ]
i.e., the virus halts the computer, and fills the screen with this message. If this text is modified in the virus code, the virus will erase the CMOS any time an infected program is executed. This virus also contains the text:
<< Towards a better tomorrow! >>
Areg Family
Description Areg Family
These are not dangerous not memory resident parasitic viruses. They search for COM-files of the current directory and write themselves at their ends. Then they type with the probability 1/8 a text message in Russian. They also contain the internal text string : "(C) 1993 AREG Soft".
|