Win32.Magic
Description Win32.Magic
It is a harmless nonmemory resident parasitic Win32 virus. It searches for Windows PE EXE files in the directory tree on current drive, and on the C: drive, moves victim file body down and writes itself to the file top. To release control to the host program the virus creates the temporary COM file with disinfected file image, and executes it.
The virus does not manifest itself in any way. It was named after the text string in its data:
Magic People-Voodoo People !
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Decept
Description Macro.Word.Decept
The virus code contains two macros:
Document:NORMAL.DOT:
--------- -----------
haha AutoOpen
AutoClose original
The virus spreads on opening and closing documents.
From 27/08/98 till 03/09/98, after 19:30 the virus replaces every tenth line with the "Se fodeu. HaHaHaHaHa!!!" text in the current document, then it displays the message:
Microsoft Word
Acabamos de destruir seu trabalho, espero que vocª tenha perdido
muito tempo com esta bosta de documento.
After that the virus terminates the MS Word.
Macro.Word.Dedicato
Description Macro.Word.Dedicato
This is an encrypted Italian specific macro virus. It contains only one macro AutoClose and infects the global macro area and documents on Close call. The virus contain the comments:
Questo MacroVirus e' dedicato alla mia ex-ragazza
Federica, che anche se molti diranno il contrario..
io ho amato tantoalle ora mi manca... (Gianlu)
On 8th and 20th of any month it displays the MessageBoxes:
Zio Luca
....MacroVirus Federica in esecuzione....
8-9 Agosto 1993
....Federica Mi Manchi....
WARNING:
Master Boot Sector Damaged
It then exits Windows.
|