Virus Database

Macro.Word97.Edds

Description Macro.Word97.Edds

This virus contains twenty macros in one module - "EddsHead". The virus replicates itself upon execution any of its macros.
The virus contains the comments:
Produced by,
The VicodinES Macro.Poppy Construction Kit v1.0b
================================================
Code Written by VicodinES "Live for Now"
Poppy ID : 24421479963

If the NORMAL.DOT file has the ReadOnly attribute set, the virus creates the C:WINDOWSSTARTM~1PROGRAMSSTARTUPMSFILE.BAT file that upon rebooting clears this attribute and erases the NORMAL.DOT.
The virus replaces the disks' icons. Depending on a random counter, the virus displays the following MessageBox:
Your Computer Has The Edds Head Virus

On February 14 (Valentine's Day), it displays the following MessageBox:
Birthday Greeting!!!
I Hope You Got Your Girlfriend Something Nice !

Depending on a random counter, the virus copies the current file to a randomly selected disk from F: to S: with one of the following names: PORNO.DOC, README!.DOC or SEX.DOC.

Check other viruses! Be aware! Use Antiviral Software

Invader.a

Description Invader.a

This is a dangerous memory resident virus. It infects COM and EXE files (except COMMAND.COM) in the same way as the "Jerusalem" virus does, and affects boot sectors of hard and floppy disks. On a floppy disk it formats an additional track, on the hard disk it writes itself just after the MBR. Depending on its internal counters the virus can execute a dummy cycle after each timer interrupt (INT 8), erase information on disks, tune a melody, decipher and display the following message:
by Invader, Feng Chia U., Warning: Don't run ACAD.EXE!
The virus also contains the text "ACAD.EXECOMMAND.COM.COM.EXE" and hooks INT 8, 9, 13h, 21h.

Invader.b

Description Invader.b

This is a dangerous memory resident virus. It infects COM and EXE files (except COMMAND.COM) in the same way as the "Jerusalem" virus does, and affects boot sectors of hard and floppy disks. On a floppy disk it formats an additional track, on the hard disk it writes itself just after the MBR. Depending on its internal counters the virus can execute a dummy cycle after each timer interrupt (INT 8), erase information on disks, tune a melody, decipher and display the following message:
by Invader, Feng Chia U., Warning: Don't run ACAD.EXE!
The virus also contains the text "ACAD.EXECOMMAND.COM.COM.EXE" and hooks INT 8, 9, 13h, 21h.

Home