Reverse.948
Description Reverse.948
These are harmless memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM and EXE files that are accessed. They contain the strings which are the file names written backward: "moc.dnammoc exe.niamcn" (NCMAIN.EXE and COMMAND.COM). The virus compares these names with the file name before infection and does not infect NCMAIN.EXE. While infecting COMMAND.COM the virus writes itself to zero-bytes area in that file (see "Lehigh" virus), and the length of COMMAND.COM file does not grow. The viruses also contain the text strings:
"Reverse.948": Reverse-948 i +. Created by Renata G. from Lubin City in
Sept 1993
"Reverse.948.b": Red Spider Virus created by Garfield from Zielona Gora in
Feb 1993
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.PCW
Description Macro.Word.PCW
It is an encrypted virus. It contains two macros: AutoOpen, DateiSpeichernUnter and infects global macros area on opening an infected file, and writes itself to documents on saving them with new name (FileSaveAs).
If day number >= 15th and month number >= 7 (July) the virus displays the message box with the text:
Happy Birthday
Herzlichen Glückwunsch
Susanne B. aus E.
zu deinem Geburtstag
Ich liebe dich
Macro.Word.Pejuang
Description Macro.Word.Pejuang
This virus contains three macros:
Documents: NORMAL.DOT:
Perjuangan FileSaveAs
AutoOpen Revolusi
Public Public
The virus infects the global macros area (NORMAL.DOT) on opening an infected document and writes itself to documents that are saved with new name. Depending on current date it erased system files or formats the C: drive. The virus contains comments:
YOGYAKARTA 96
PESAN INI UNTUK MENGETUK HATI NURANI RAKYAT
MARI BERJUANG BERSAMA KAMI
TEGAKKAN KEADILAN YANG TELAH DIINJAK-INJAK
UNDERGROUND PUBLIC MESSAGES
!!!!!!!!!!!!!!!!!!!!!!!!!
|