VirDem.1336.b
Description VirDem.1336.b
This is a nonmemory resident parasitic virus. It writes itself to the beginning of COM files of the current or A: drives.
The virus modifies and do not restores the file attributes and displays the strings:
Virdem Ver.: 1.06 (Generation 5) aktiv.
Copyright by R.Burger 1986,1987
Tel.: 05932/5451
Dies ist ein Demoprogramm fuer
Computerviren. Geben Sie nun
bitte eine Zahl ein.
Wenn Sie richtig raten,duerfen
Sie weiterarbeiten.
Die Zahl liegt zwischen
0 und
Bedauerlicherweise war Ihre
Antwort nicht richtig.
Mehr Glueck beim naechsten Mal all.
Bravo. Richtige Antwort.
Sie duerfen weiterarbeiten.
Alle Ihre Programme sind nun infiziert.
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Scam
Description Macro.Word.Scam
This is a harmless macro virus. It contains one macro AutoOpen and infects documents and global macros area on Open call. The virus removes the File/Templates and Tools/Macro menus, it contains the texts:
SkamWerks Labs Presents the Generic Concept Created by Skam
What? No Payload? WUSSY!
Virii Unite!J
Macro.Word.Schoo
Description Macro.Word.Schoo
This is an encrypted virus. It contains 7 macros:
Documents NORMAL.DOT
GRBack GetRid
AutoOpen AutoOpen2
FileSave FileSave
VerIdent2 VerIdent
FileSaveAs FileSaveAs
BJTradeMark BJTradeMark
ToolsSpelling ToolsSpelling
It infects the global macros area on opening an infected document. It infects files that are saved with new name.
The virus adds new commands to Word auto-correction:
school -> schoo'
recognize -> reckonize
recognized -> reckonized
assembly -> assemily
CHS -> Crowley High Schoo'
Since 28 of May 1998 the virus displays many MessageBoxes, for example:
Microsoft Word Virus Alert
Warning: The 'Big Johnson' Virus has been detected.
On 28 may 1998 it display the MessageBox:
Microsoft Word Virus Alert
Transferring control to virus subroutine:
Virus initializingall
It's the last day of school!
On all following days it displays the MessageBox:
Microsoft Word Virus Alert
Transferring control to virus subroutine:
Virus initializing...
School's out!
|