Win32.HLLP.Savno
Description Win32.HLLP.Savno
This is a harmless Win32 virus written in Visual C++. It is a Win32 application (PE EXE file)
The virus looks for EXE files from 102400 to 10385024 bytes in size in the KaZaa Shared folder and writes itself to the beginning of these files. It can then propagate outside the KaZaa file-sharing network.
The virus contains a Trojan component which intercepts passwords entered in Internet Explorer.
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Ofxx
Description Macro.Word.Ofxx
This is an encrypted virus containing three macros that have different names in global area (NORMAL.DOT) and infected documents:
NORMAL.DOT Infected files
Macro1 Ofxx AutoOpen - infects the global area on opening
Macro2 AutoClose Cfxx - infects the files on closing
Macro3 AutoExec Show - corrupted in samples I have
In most samples macro "AutoExec" ("Show") is damaged, but virus code is able to replicate itself without problems ever with damaged macro. The damaged macro contains following text:
at yang kaya dengan uap air bali yang berada di direktori WINDOWS
dan WINWORD telah hilang, jangan kaget, ini bukan ulah Anda, tapi
ini hasil pekerjaan sayaallBarang siapa yang berhasil menemukan
cara menangkal virus ini, saya aka j¡n memberi listing virus ini
untuk Anda !!! Dan tentu saja saya akan terus datang kesini untuk
memberi Anda salam dengan virus-virus terbaru dari saya...selamat !
Bandung,
C:PESAN.TXT
This text is very similar to the text included in the "Macro.Word.Bandung" virus.
Macro.Word.Olimpic
Description Macro.Word.Olimpic
This is an encrypted virus containing only one macro AutoOpen. It infects the global macros area on opening an infected document and writes itself to the noninfected documents that are opened.
|