BadBoy.991
Description BadBoy.991
This is a harmless memory resident parasitic encrypted virus. It hooks INT 21h and writes itself at the beginning of COM files are executed. This virus uses System File Table on infection. It is divided on 9 blocks of code and data (installation block, data block, INT 21h block e.t.c.). When the virus installs itself into the memory, 8 of these 9 blocks can be rearranged in any order depending on the system timer. On infection the virus saves encrypted image of its TSR copy into the file, so orders of code blocks in two infected file can be different.
The virus contains the text:
Cure_ME_DANIEL!
ANTI CRI I HOPE YOU BURN IN HELL ASSHOLES
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Attcah
Description Macro.Word.Attcah
This virus contains two macros: AutoOpen, FileClose. It infects the global macros area on opening an infected document (AutoOpen) and infects documents on closing (FileClose). The virus deletes the Word.Macro.Concept virus macros. The virus contains the text:
Attcah the antivirus to the file
Macro.Word.Azrael.a
Description Macro.Word.Azrael.a
This macro-virus contains one macro "auto-open" and spreads upon document opening. On the 23rd of any month, it deletes all files with a .DLL extension in the C:WINDOWSSYSTEM directory, and displays the following message:
Azrael cleaned your system directory !!!
The "Azrael.b" virus on 23'th deletes all .DLL files in the E:TEMP1directory and does not displays any message.
|