Mvf.1896
Description Mvf.1896
This is a harmless memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM files. It contains the mask string "*.COM".
Sometimes it displays the message:
THE MVF-FILEVIRUS
Programmed 1991 by the MVF
MAD Virus Factory
It also contains the text string:
No. 0001" or "28/9/91 - V1.6
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.NF
Description Macro.Word.NF
It is an extremely silly encrypted virus containing nothing except infection routines. Summary length of its two macros (nf, autoclose) is just 286 bytes.
Both virus macros contains infection routines. First macro infects global area while closing an infected document (it is named "autoclose" in infected documents and "nf" in NORMAL.DOT), second macro infects documents that are closed (it is named "nf" in infected documents and "autoclose" in NORMAL.DOT). So the virus exchanges names of these macros as several macro viruses do - while infecting a file or global area it copies "nf" macro with name "autoclose", and "autoclose" with name "nf".
NORMAL.DOT Infected files
Macro1 nf autoclose
Macro1 autoclose nf
While infecting the system the virus displays the string "Infected!", while infecting a file the virus displays "Traced!".
Macro.Word.NiceDay
Description Macro.Word.NiceDay
This virus is based on Word.Macro.Concept virus. It contains four macros:
in NORMAL.DOT in infected files
PayLoad Payload
AutoExit AutoExit
VOpen AutoOpen
AutoClose VClose
Payload macro contains the same text as "Word.Macro.Concept":
That's enough to prove my point
On AutoExit the virus displays the message:
Have a Nice Day !
|