Olexy.1864
Description Olexy.1864
It is not a dangerous memory resident encrypted parasitic virus. When an infected file is executed, the virus searches and infects EXE files of current directory, then it hooks INT 15h, 21h and writes itself to the end of EXE files that are executed.
While infecting the virus may corrupt the files (bug). It manifests itself by a music. On INT 15h, AX=8500h call it displays "?" symbol (F9H ASCII), It contains the text string:
Olexy
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Lemon
Description Macro.Word.Lemon
This is an encrypted macro virus. It contains two macros that have different names in documents and NORMAL.DOT:
Documents NORMAL.DOT
AutoOpen AutoOpen
Lemon Melon
Depending on the system date and random counter, the virus displays the MessageBox:
!!LEMON!!!!MELON!!
!!MELON!!!!LEMON!!
The Lemon (Melon) macros contains only comments:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!MELONLEMONMELONLEMONMELONLEMONMELONLEMONMELONLEMONMELON!!
!!MELONLEMONMELONLEMONMELONLEMONMELONLEMONMELONLEMONMELON!!
. . .
!!MELONLEMONMELONLEMONMELONLEMONMELONLEMONMELONLEMONMELON!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Macro.Word.Ler
Description Macro.Word.Ler
This is an encrypted macro virus. It contains two macros in documents: AutoOpen, hitler; and four macros in NORMAL.DOT: AutoExec, AutoOpen, Autoeopen, hitler.
The virus replicates on opening a document. On April 15 the virus displays the MessageBox:
Hitler
India Is Great
The virus creates random named directories on the C: drive and creates the HITLER.TXT file in there. These files contain the text:
MSWORD is infected by a new virus HITLER
Date = <current date>
Time = <current time>
|