Earle.1431
Description Earle.1431
It is a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of .COM and .EXE files (except COMMAND.COM) that are executed or opened. On 97th infection the virus also hooks INT 13h and swaps disk access: from disk A: to disk B: and from B: to A:. With probability 0.04% depending on its internal counter the virus also redirects all hard drive access calls to A: drive.
The virus contains the text strings:
COMEXE
This program is dedicated to my girlfriend Gabriela,
who hates computers. SWITCH v 1.3 (C) by Windom Earle
Check other viruses! Be aware! Use Antiviral Software
Macro.Word.EC
Description Macro.Word.EC
This virus contains three macros: aaaaa, AutoOpen, AutoClose. It infect the global macros area (NORMAL.DOT) on opening an infected document and writes itself to documents that are closed. To prevent duplicate infection the virus check its presence by "aaaaa" macro. The virus does not manifest itself in any way. The "aaaaa" macro contains 13 "EditClear" instructions.
Macro.Word.Echo
Description Macro.Word.Echo
This is a polymorphic and stealth macro virus. It contains five macros in documents and seven in NORMAL.DOT:
Documents NORMAL.DOT
EchoOff EchoOff
CopyMacro CopyMacro
FileClose FileClose
Generation Generation
Trasher ToolsMacro, FileTemplates, ToolsCustomize
It replicates on closing documents and does not manifest itself in any way.
|