Virus Database

Sabotager.3133

Description Sabotager.3133

It is not a dangerous memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. The virus checks the file names and does not infect the file if its name contains the symbols ID, WE or AD. In some cases the virus terminates execution of a program and displays the picture:
______________________
_____________________________
____________________________________
________________________________________
__________________________________________
_____________________________________________
_____________________________________________
_____________________________________________
_____________________________________________
__ __________ ____ ________
__ ______ __ ______
___ _______ _________
_______________ _________ __________
_____________ _________________________
___________ __________________ ___
___________________ _
SABOTAGER __________________
éÑ_ß¿_ 1.0 __________________ _
Written by _ _ _ _ __
S H U L D E R _______ _____________ ___
___________________________
___________________________
_________________________

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Saturn

Description Macro.Word97.Saturn

This macro virus contains eight macros in one module "Saturn": AutoOpen, AutoClose, Stealth, ToolsMacro, ToolsCustomize, ViewVBCode, Saturn, UMP.
The virus infects the global macros area on opening an infected document (AutoOpen). Other documents get infection on their opening and closing. While infecting the virus turn off the Word virus protection (the VirusProtection option). Depending on the system date and random counter the virus changes the computer's name to "SOS" and set on document the password "SOSxxx", where "xxx" is a number from 1 to 333. On entering the menu Tools/Macro, Tools/Customize or opening Visual Basic Editor it displays one of the following messages:
Not enough memory to perform this operation
Impossible open this function
Function does not answer system requests
This program has performed an illegal operation and will be locked
This option at present not available

The virus then swaps reaction on mouse buttons and closes all documents.

Macro.Word97.Saver

Description Macro.Word97.Saver

This is an encrypted virus. It contains one macro: dateispeichern. On April 21 the virus displays the message box with the text:
Saver(SEX) written by Spooky. Austria 1996

Home