Verwolf Family
Description Verwolf Family
These are not dangerous(?) nonmemory resident parasitic polymorphic viruses. They search for EXE files and write themselves into the middle or to the end of the file. While infecting a file they trace and hook INT 13h and install themselves as device driver (I see not for what reason). Sometimes they leave the memory resident program that hooks INT 21h and triggers while opening some files. The viruses contain the text strings: "Verwolf.3308": My name is VERWOLF ! "Verwolf.3502": My name is VERWOLF1 !
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Talon.b
Description Macro.Word.Talon.b
This macro-virus contains five original macros that are copied with six different names while infecting the system and documents. All macros except the Info macro are encrypted. Documents NORMAL.DOT Macro1: FSAB FileSaveAs FSAB Macro2: AOB AOB AutoOpen Macro3: ToolsMacro ToolsMacro Macro4: Info Info Macro5: Password The virus infects the global macros area upon opening an infected document (AutoOpen), and writes itself to files that are saved with new name (FileSaveAs). Upon entering the Tools/Macro menu (ToolsMacro), the virus displays the following MessageBox: Warning This Option Is Not Available, Please Insert The MS-Office CD And Install The Help Files To Continue. On the 27th of any month, the virus sets the password "talon" for documents and displays the Message Boxes: Warning Your document Has Just been Been Saved, I Hope You Know The Password!!!", Brought To You By Talon 1997" The Info macro contains the comments: ********************************************* Talon #1 June 18 Payload Activates Displays Message All Files Encrypted Except Info File Brought To You By "Talon" *********************************************
Macro.Word.Talon.c
Description Macro.Word.Talon.c
This macro-virus contains five original macros that are copied with six different names while infecting the system and documents. All macros except the Info macro are encrypted. Documents NORMAL.DOT Macro1: FSAB FileSaveAs FSAB Macro2: AOB AOB AutoOpen Macro3: ToolsMacro ToolsMacro Macro4: Info Info Macro5: ToolsSpelling The virus infects the global macros area upon opening an infected document (AutoOpen), and writes itself to files that are saved with new name (FileSaveAs). Upon entering the Tools/Macro menu (ToolsMacro), the virus displays the following MessageBox: Warning This Option Is Not Available, Please Insert The MS-Office CD And Install The Help Files To Continue. In June on Mondays, the virus sets for documents the password "talon3" and displays Message Boxes: Warning I Have A Word For You To Spell V I R U S Your document Has Just been Been Saved By The Word Macro Virus Talon #3, I Hope You Know The Password!!! Brought To You By Talon 1997 The Info macro contains the comments: ********************************************* Talon #1 June 18 Payload Activates Displays Message All Files Encrypted Except Info File Brought To You By "Talon" *********************************************
|
Home
Viruses from A to Z 0-9
A
B
Ñ
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
|