Alabama
Description Alabama
It is a very dangerous resident virus. It affects .EXE-files in the current disk directory, where a file is being run from or opened in. An infected file is being searched by the FindFirst and FindNext functions and not necessarily coincides with a file being opened or executed. On infecting, "Alabama" uses FCB-functions for work with files, appends to the file end; incorrect infection is possible. In an infected file the time of last modification is set to 62 seconds. This infector tries to "survive" a reboot - for this purpose it sets INT 9h (keyboard), hooks the Alt-Ctrl-Del combination, then turns off the screen and calls the boot procedure (INT 19h). During this operation the codes of the virus are not erased. Depending on the current time "Alabama" might displays the messages: +-----------------------------------------------------+ ¦ SOFTWARE COPIES ARE PROHIBITED BY INTERNATIONAL LAW ¦ ¦ ¦ ¦ Box 1055 Tuscambia ALABAMA ¦ +-----------------------------------------------------+
The virus hooks INT 9, 21h, contains the text string "????????EXE" and doesn't have destructive functions. But it works incorrectly with files and the memory - might hang up the system.
Check other viruses! Be aware! Use Antiviral Software
Macro.Word97.Gamble
Description Macro.Word97.Gamble
This is a stealth macro virus. It contains 3 modules and 11 functions: AutoOpen, Gamble1, ToolsMacro, CommandButton2_Click, CommandButton5_Click, Image1_Click, Label2_Click, Label3_Click, Label4_Click, UserForm_Click, CommandButton1_Click. On opening an infected file the virus disables the VirusProtection and infects the global macros area (NORMAL.DOT), then on opening not infected files the virus infects them. The virus substitutes the Tools/Macro menu (stealth), on pressing the "Create" button it displays the MessageBox: Memory Allocation Error Not Enough Memory To Complete The Request
On Mondays the virus displays the DialogBox: Word Macro97 Virus "The Gambler" By Talon 1997 You System Is Infected By "The Gamble" Word Macro Virus I Will Give You One Chance To Save Your Files, If You Can Guess The correct Number between 1 And 10, I Will Return Your System To Your Control If Your Wrong, Well We Won`t Go There. Do Not Not Turn Your System Off. Your system FIles Have Been Encrypted With A Random Number, If This Is Not Completed Your System Will Not Be Able To Reboot. Just Play Along And Hope Your A Good Guess. When Your ready To Play Press Here
On pressing the mouse button on Dialog the virus displays the MessageBox: Trying To Cheat?? Are You Trying To Cheat?? One More Attempt like That And it's Over
On pressing "HERE" button the virus ask for a number from 1 till 10. On entering '5' the virus display the MessageBox: Your A Winner Good Guess, It's All Yours
In any other case the virus sets the password to current documents and exits Windows.
Macro.Word97.GamesVirus
Description Macro.Word97.GamesVirus
This virus contains seven macros in one module "GamesVirus": AutoExec, AutoOpen, FileSaveAs, FileTemplates, PayLoad, ToolsMacro, ViewVBCode. It infects the global macros area on opening an infected document and infects documents on opening or saving with new name. On entering the Tools/Macro and File/Templates menus the virus displays the MessageBoxes: Microsoft Word accès refusé!!!! Microsoft Word Fonction Sub inconnu
Depending on the system date and time the virus manifests itself in several ways. If current number of seconds is 1, the virus writes to the Subject field in FileSummaryInfo the text: GamesVirus est avec vous, HAHA !!
If current number of minutes is 1, the virus writes the string to the StatusBar: Remerciement à GamesVirus et à son auteur: ZeMacroKiller98
On tje 1st of any month it calls the Payload macro which displays several MessageBoxes and user forms. Depending on user's input the virus display MessageBoxes, erases system files, appends to the end of C:AUTOEXEC.BAT file instructions that format the hard disk, or in cycle draws the text in the status line: Tu es le meilleur, bravo de la part de GamesVirus et de son auteurall.
|
Home
Viruses from A to Z 0-9
A
B
Ñ
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
Compact Flash Pinout Free Powerpoint Download Free Excel Download Dating For Seniors Mauritius Phone Cards
|