CLL.947
Description CLL.947
It is not a dangerous memory resident parasitic virus. It hooks INT 10h, 21h and writes itself to the end of COM and EXE files that are executed. On any INT 10h call the virus writes zero to ports 200h, 220h, 240h, all, 2E0, on any INT 21h call the virus writes random data to ports 230h-233h and 250h-253h (disables soundblaster? Adaptec adapters?). The virus contains the text string:
Creative library link. Copyright(c) 1994 by Michael Carington.
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Header
Description Macro.Word.Header
This virus contains 3 macros:
Documents NORMAL.DOT
AutoOpen ao
fs FileSave
fsa FileSaveAs
The virus infects the system area on opening an infected document (AutoOpen). It infects documents that are saved (FileSave) or saved with new name (FileSaveAs). The virus checks its presence by using document's Header, in which it writes the text:
Your document was infected by a very dangerous virus!
Macro.Word.Helper.a
Description Macro.Word.Helper.a
It is an encrypted virus. It contains only one macro AutoClose and infects documents and the NORMAL.DOT file on closing. Depending on the system date it sets the password "help" for current document.
|