Macro.Word97.AntiWazzu
Description Macro.Word97.AntiWazzu
This macro virus contains two macros: autoopen and tempcdg. It spreads on documents opening. While infecting it also deletes "autoClose" macro, in this way it struggles against "Wazzu" virus family. Starting from April 1st 1999 the virus activates self-destruction routine. This routine deletes "autoopen" macro that contain the main virus code.
Check other viruses! Be aware! Use Antiviral Software
PMM.575
Description PMM.575
It is a harmless nonmemory resident parasitic virus. It searches for COM files, then writes itself to the end of the file. The virus contains the text string:
*PMM r1.0*
That virus uses quite interesting mutation routine. That routine scans the code of the virus, disassembles the instructions, and replaces some instructions with their "synonyms":
XOR Reg,Reg -> SUB Reg.Reg
MOVSB -> MOVSW
MOVSW MOVSB
and so on. As a result, the virus is not encrypted, but in different infected files the code of the virus contains different instructions.
PMT.867
Description PMT.867
It is a harmless memory resident encrypted companion virus. It hooks INT 21h and creates companion .COM files while executing EXE files. The virus contains the text strings:
Anke Huber for Ever
"-=_ AP.CC.DV.EV.DF.T2T.TC.M.SR.RA _=-"
Fuck John McAfee
Eat my Butterfly
Suck her Spinkta muscle
Bruce Sterling; I'd like to shove ya texan accent down ya throat
Oprah Winfrey sings ACDC's classic PMT
I've got PMT
PMT
I'm dynamite
PMT
But I'll win the fight
PMT
I'm a powerload
PMT
Just watch me explode
The funky dyin' brain cell
CRYPTO-KING v1.0
|