Ohlala Family
Description Ohlala Family
These are not dangerous nonmemory resident encrypted parasitic viruses. They search for COM and EXE files (except COMMAND.COM) and write themselves to the end of the file. The viruses delete the files *.MS and *VIR.DAT. They play a tune and display the message:
Ohhhh La La!
Mommmmy, they're teasing me again
Shut up you little sonsuvbitches
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Balrog.a
Description Macro.Word.Balrog.a
This is the encrypted macro virus. It contains only one macros "AutoClose" and infects the global macros area and documents on File/Close call. This is a Spain-specific macro virus - it does work only under Spain-Word version. Under other versions it overwrites the C:COMMAND.COM file with a copy of the current document.
Depending on a random counter it appends the text to the end of current document:
P.S.: You are a very stupid people.
P.S.: I hate you a lot.
P.S.: I wish your death.
P.S.: All the things I told you are lies.
P.S.: Call me if you need sex.
Macro.Word.Baluade
Description Macro.Word.Baluade
This is an encrypted macro virus. It contains two macros: AutoOpen, ReadMe. It infects the global macros area on opening an infected document (AutoOpen). The ReadMe macro is copied to the NORMAL.DOT with new name DateiSpeichern. The virus sets two passwords: "SSichliebeDich" and "SSICHLIEBEDICH".
|