Virus Database

Bios.2048 Family

Description Bios.2048 Family

These are memory resident viruses. They hook INT 9, 1Ch, and 21h, and infect COM- and EXE-files. "Bios.2048.a,b" are harmless encrypted infectors. Sometimes they beep by internal speaker. They contain the text strings:
Producted by Mr.Watshira Sae-eu KMIT-NB Date 12/28/1990 BIOS
BIOS

"Bios.2048.c" is a dangerous virus. On December 28th, it erases the first logical sector of the current drive (MBR of hard drive and boot sectors of floppies). It contains the internal strings:
We are PRO Version 1.0 Producted by Mr.Watshira Sae-eu KMIT-NB
Date Dec 28,1990 See U Next Version. BIOS SOIB 12281972279182211

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Sveta

Description Macro.Word.Sveta

This virus contains two macros: AutoOpen, Sveta. It replicates on opening infected documents (AutoOpen): it searches for documents in FileList (recently used files list) and infects them. So the virus is "nonmemory resident" - it is active only when infected document is being opened, and AutoOpen macro takes control. When it releases control, the virus does not intercept any events and does not infect files (if, of course, NORMAL.DOT or some another auto-loaded template is not listed in FileList).
On activating at 13 seconds (i.e. on opening an infected document) the virus displays to the StatusBar the message:
----------======> SVETA by Kid Chaos [SLAM] <=======----------

Macro.Word.Switcher

Description Macro.Word.Switcher

This is an encrypted stealth Word macro virus. It contains ten macros: AutoExec, AutoOpen, AutoClose, FileClose, FileOpen, FileSave, FileSaveAs, FilePrint, FileTemplates, ToolsMacro.
The virus infects the global macros area (NORMAL.DOT) on opening an infected document, saving it, saving with new name, closing, printing and entering Tools/Macro menu. Documents get infection when they are saved, saved with new name or closed. The infection routine is placed in FileClose macro, other macros call that macro to run infection.
On closing a document if the seconds are less than 10, the virus replaces one random digit in current document. On entering Tools/Macro and File/Templates menus the virus displays the MessageBox:
Configuration conflict - menu item is not available.

Home