Ol.1562
Description Ol.1562
It is a harmless memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. The virus does not manifest itself in any way. To detect its TSR copy while installing memory resident the virus uses INT 21h AH=DDh call, the memory resident copy returns "OL" in AX register.
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Trash.a
Description Macro.Word.Trash.a
These stealth macro viruses contains three encrypted macros:
Documents NORMAL.DOT
Save000 FileSaveAs,Save000
AutoOpen,Toolsmacro Toolsmacro
The viruses infect the global macros area on opening an infected document (AutoOpen) and write themselves to files that are saved with new name (FileSaveAs).
On July 24 the virus deleted the files C:COMMAND.COM, C:IO.SYS. If virus macros are executed, and the system time it exactly 55 seconds, the virus deletes the files A:*.*; if current time is less than 5 minutes, the virus searches and replaces words to expressions:
"hard" -> "fucking hard"
"easy" -> "a piece of piss"
"think" -> "fucking knows"
Macro.Word.Trojan.Format
Description Macro.Word.Trojan.Format
This is a Word macro-Trojan. It contains one macro: AutoOpen. This Trojan inserts into the file AUTOEXEC.BAT commands that delete files and format the hard drive. The Trojan also inserts the following text into the current document:
RESET seu micro agora seu LAMMER BURRO !!!
Auto-Destrui o em 15 seg.
and shutdowns Windows.
|