Macro.Word97.Steroid
Description Macro.Word97.Steroid
This virus contains eleven macros in one module "Inject". It infects system and documents on run any of this macros and also changes volume label on drive C: to "Testicle". On exiting Microsoft Word it infects all documents in the current directory. On entering the "Help/Aboutall" menu it displays two messages:
VMPCK v2.0 Beta / SR-1 Compatable
Can I have a bottle of warm Diet Mountain Dew?
W97M/Steroid.Poppy
Shout Out! ...Slage Hammer, Spanska and the entire _Kim_Liberation_Army_
On opening the Visual Basic Editor the virus infects all documents in the current directory and displays Microsoft Word dialog widows in random order.
The code of virus contains the comments:
The VicodinES Macro.Poppy Construction Kit v2.0 Beta
Code Written by VicodinES-VV/----------------------
Poppy ID : 75637833-270----/---Compatable with SR-1
Steroid.Poppy.II-----------/--Never Begins Tomorrow
Check other viruses! Be aware! Use Antiviral Software
Exit.376
Description Exit.376
It's a harmless memory resident parasitic virus. It copies itself into the Interrupt Vectors Table, hooks INT 21h and writes itself to the end of .COM-files that are terminated. It contains an internal text string in Russian.
Exorcist Family
Description Exorcist Family
Exorcist.212
It is a very dangerous nonmemory resident overwriting virus. It searches for .COM files, then overwrites them, and displays the message:
Bad command or file name
then returns to DOS. On 1st of any month the virus erases sectors on the C: drive. The virus also contains the text strings:
[RED MEASLES]
Exorcist[DC]*.com
Exorcist.613,617
These are very dangerous nonmemory resident partly encrypted parasitic viruses. They search for COM files, then write themselves to the end of the file. Depending on the system date they erase disk sectors and display the message:
Relapse The Cronic Odium
The viruses also contain the text strings:
[ODIUM RELAPSE]
*.com .. [Exorcist!dc^96]
|