Privet.1152
Description Privet.1152
It is not a dangerous memory resident parasitic virus. It writes itself to the end of .EXE files (except EXE files that are packed with PKLite utility). When an infected file is executed, the virus searches for .EXE files in the current directory and infects them. The virus then hooks INT 21h, stays memory resident and searches for .EXE files to infect them when any file is executed, loaded for debugging or as an overlay (INT 21h, AH=4Bh).
Depending on its generation the virus displays a message in Russian. The virus also contains the string:
*.exe skh
Check other viruses! Be aware! Use Antiviral Software
Macro.Word97.Nova
Description Macro.Word97.Nova
The virus contains two auto-macros: AutoClose and AutoExit. It spreads on documents closing. On Word exiting on July 28th the virus displays the message:
Meu anivers¡rio
Parab©ns para mim!
On others dates it displays another message:
Nova Vtima
Fechando 2807M!
Macro.Word97.Novosib.a
Description Macro.Word97.Novosib.a
This is Russian macro virus. It contains four macros:
Documents NORMAL.DOT
AutoOpen AutoOp
Fantom Fantom
Fuck FileOpen
AutoClose AutoClose
It infects the global macros area and documents on files opening. The virus contains comments and displays MessageBoxes in Russian.
|