Pcvrs.1904
Description Pcvrs.1904
This is a very dangerous memory-resident parasitic virus. It hooks INT 21h and 16h (keyboard), and writes itself to the beginning of .COM (except COMMAND.COM) and to the end of .EXE files that are executed or opened.
Some time after activation, the virus starts to delete files that are opened. On Monday 23, the virus formats the hard disk and displays:
PcVrsDs Version 1.00 Copyright (C) VirOP 1990.
and changes every 13th key that is pressed. The virus also contains the ID-string:
PcDos
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Ultras.Goblin2
Description Macro.Word.Ultras.Goblin2
This virus infects the Word documents. The infection is run on documents opening or closing.
On Tuesday it creates the Zoo.383.b virus dropper on the C: drive, inserts into the C:AUTOEXEC.BAT file the command to execute it and displays the MessageBox:
ULTRASall
GoBLiN II by ULTRAS
Thank you Dirty Nazi [Stealth group WorldWide]
for such beautiful virus.
Macro.Word.Ultras.Joke
Description Macro.Word.Ultras.Joke
These viruses infect the Word documents. The infection is run on documents opening or closing.
The virus sets to "Ultras/Joke/ULTRAS2.usa.net" the Name/Initials/Address in document's UserInfo fields. The virus also makes changes in the Registry:
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersion]
"RegisteredOwner"="ULTRAS"
"RegisteredOrganization"="Rioters"
"ProductName"="JoKe By ULTRaS"
[HKEY_CLASSES_ROOTWORD.DOCUMENT.6DefaultIcon]
C:WindowsSystemShell32.dll,31
[HKEY_CLASSES_ROOTWord.TemplateDefaultIcon]
C:WindowsSystemShell32.dll,32
|