Macro.Word.Ultras.Goblin2
Description Macro.Word.Ultras.Goblin2
This virus infects the Word documents. The infection is run on documents opening or closing.
On Tuesday it creates the Zoo.383.b virus dropper on the C: drive, inserts into the C:AUTOEXEC.BAT file the command to execute it and displays the MessageBox:
ULTRASall
GoBLiN II by ULTRAS
Thank you Dirty Nazi [Stealth group WorldWide]
for such beautiful virus.
Check other viruses! Be aware! Use Antiviral Software
Csf.240
Description Csf.240
It's a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the beginning of COM-files that are executed. It contains the internal text string: "csf".
Csl.381
Description Csl.381
These are memory resident harmless (except "Csl.517") viruses. They copy themselves into the Interrupt Vector Table, hook INT 21h and infect by standard way COM-files which are loaded into the memory. "Csl.517" erases some bytes of CMOS. These viruses contain the text strings:
"Csl.381" - "26.07.91.Pre-released Microelephant by CSL";
"Csl.457" - "Microelephant V5 by CSL";
"Csl.517" - "Microelephant V4 by CSL".
|