Aija
Description Aija
It's a dangerous memory resident boot stealth virus. On loading from infected floppy it hits MBR of hard drive and returns control to host sector. On loading from infected MBR it hooks INT 13h and writes itself into boot sectors of floppies. The virus saves its second part and original sector at the last two sectors of disk (of the first logical disk on hard drive). On March, 25th it erases disk sectors and displays the message:
FINNISH_SPRAYER.1. Send your Painting +358-0-4322019 (FAX), [Aija]
It contains the internal strings also:
Ai
Tks to B.B., Z-VirX all.. [Aija]
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.Sunbeam
Description Macro.Word.Sunbeam
This Word macro virus contains three macros: DocClose, SUNBEAM, FileOpen. The virus infects the global macros area (NORMAL.DOT) on closing an active window (DocClose) and writes itself to documents that are opened (FileOpen).
On October 5th the virus creates and executes the random named file (<3 letters of current document name>DIE.BAT) that contains the text:
echo 123>clock$
Macro.Word.Supers
Description Macro.Word.Supers
It is an encrypted macro virus. It contains one macro AutoOpen and infects system and documents on opening. On Friday 13th it writes to the C:AUTOEXEC.BAT file the commands:
@ECHO OFF
CLS
ECHO Friday the 13th sends greetings to everyone who's reading this text.
|