Win16.HLLP.Hiro.10240
Description Win16.HLLP.Hiro.10240
Hiro is a not dangerous, non-memory resident parasitic virus written in Pascal. It is a 16 bit NE EXE file that also works under Windows 3.xx. The virus contains the text string:
Hiroshima end 000 v1.2000:0000
The virus looks for EXE-files in Windows directories and writes itself to the beginning of files. The directories 'Hiro' searches are:
C:WINDOWS
C:WINDOWSSYSTEM
The Hiro virus creates a list of files before infecting them. The file list location and name is as follows:
C:SETWIN.TMP
Each time an infected computer is started the virus changes the system date to:
August 5, 1995
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.HaHa
Description Macro.Word.HaHa
This virus contains four macros:
NORMAL.DOT Infected files
HaHa HaHa
FileSaveAs FileSort
FileSort AutoOpen
EditSize EditSize
The virus infects the system on opening an infected file (AutoOpen) and infects the files that are saved (FileSaveAs).
Macro "HaHa" is virus-ID macro, it is commented by string:
Wondering how to fix your program?
and contains the remark:
REM Sure Hate it for ya!!
The virus deletes all texts within document, inserts the strings:
i said:
say goodbye to all your stuff
(look at that hard drive spin!)
and then saves the document 100 times on disk.
Macro.Word.Hark
Description Macro.Word.Hark
This is a Word macro virus. It contains two macros: AutoOpen, HARKONE. The virus replicates itself when documents are opened (AutoOpen). On June 1st it erases the whole text in the current document, maximizes it and inserts the text:
H A R K O N E
N J [ S L A M ]
|