Win95.Youd.1388
Description Win95.Youd.1388
It is a harmless nonmemory resident parasitic Windows virus. It searches for PE EXE files (Win32 executables), then writes itself to the end of the file to the last file section by increasing its size. The virus searches for PE files in the current directory only.
The virus is Win95/98 specific. To access Windows functions is scans Windows kernel data addresses that are valid only under Win9x, not WinNT.
On March 9th the virus displays the message:
YouDie
My mother died.
My father died.
My sister died.
My brother died.
My uncle died.
My aunt died.
My grandmother died.
My grandfather died.
My stepmother died.
My stepdog died.
all.. YOU DIE!.
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Innuendo
Description Macro.Word.Innuendo
The macro virus contains one macro AutoOpen and replicates when documents are opened. After infecting the virus sends current document by E-mail (File/Send menu). This E-mail has Subject = "Welcome to.." and Message = "Innuendo v1.00". The virus then displays the MessageBox:
Innuendo v1.00
Macro.Word.Inside
Description Macro.Word.Inside
This virus contains one macro "autoOpen" in infected documents and two macros "AutoOpen" and "Disaster" in global macro area. It infects the global macro area (NORMAL.DOT) on opening an infected document and writes its code to documents that are opened.
In documents the virus keeps the infection routine in area of document's variables. While infecting NORMAL.DOT the virus ("AutoOpen" macro) creates the temporary file DISASTER.DEC, copies the document's variables to there and opens it. Newly created document contains a macro that infects the NORMAL.DOT.
While infecting a document the virus creates the same file DISASTER.DEC, writes its code to there and inserts this document into document's variables. Then the virus copies the "AutoOpen" macro to this document.
|