BadBoy.1000.c
Description BadBoy.1000.c
This is a harmless memory resident parasitic encrypted virus. It hooks INT 21h and writes itself at the beginning of COM files are executed. This virus uses System File Table on infection. It is divided on 9 blocks of code and data (installation block, data block, INT 21h block e.t.c.). When the virus installs itself into the memory, 8 of these 9 blocks can be rearranged in any order depending on the system timer. On infection the virus saves encrypted image of its TSR copy into the file, so orders of code blocks in two infected file can be different.
The virus contains the text:
Pile of shit
The Worthless Piece of shit virus that is a joke.
Check other viruses! Be aware! Use Antiviral Software
Macro.Excel.Queen
Description Macro.Excel.Queen
This virus infects Excel worksheets (XLS files). It comprises two macros in two modules: QUEEN, Auto_open. The virus does not manifest itself in any way.
While infecting a system the virus creates the infected GLOBAL.XLM file in Excel startup directory. To infect other files the virus sets its infection macros QUEEN - this macros is executed on activation of any sheet.
Macro.Excel.Robocop
Description Macro.Excel.Robocop
This is an Excel macro virus. It contains two modules COP and ROBO. Module ROBO contains the auto-routine Auto_Open that is executed on opening an infected file. That macro infects the PERSONAL.XLS file and assigns virus code as being executed on activating a sheet (SheetActivate handler). As a result, the virus will infect current files (books) on activating a sheet.
On March 1st the virus inserts the texts into current sheet:
ROBOCOP Nightmare Joker [SLAM]
|