- [Duke's Virus Labs #4] - [Page 24] -

   
(c) by Eugene Kaspersky

 । :
    AVP, Eugene Kaspersky, ॣ୮ 㡫  ७樨
   AVP.SUPPORT ᠭ  ᮢ.  㬠,    뫮
    ⥫ DVL   ⮩ ଠ樥. ⮬  ᮡࠫ
    ᫥ 㡫樨 (03.09, 05.09, 30.09, 16.10, 31.10,
   07.11, 01.12)  ࠧࠫ   䠢.  (c) ࠭ 
   Eugene Kaspersky & AVP Team (   ଥ,    ;)


============================================================================
 Andrisd (03-09-98)
 
H 㧮 . 墠뢠 INT 13h  뢠 
boot-ᥪ 䫮-᪮  MBR .  ࠦ 
㧪  ࠦ 䫮-᪠, ᪥ ࠦ  饭 
.

 뢠 㭪樨 Novell Netware  ᮧ  ࢥ Novell 
쥪 "ANDRISD"  ࠢ 㯥ࢨ.  ꥪ  쭥襬 
ᯮ짮  祭   짮⥫  ᠭ樮஢묨
ࠢ 㯥ࢨ. ஬ ⮣, ᮧ ᮬ ꥪ  
짮⥫,   ࠢ 㯥ࢨ.

============================================================================
 Baphometh.1536 (07-11-98)
 
 १ 䠩-㧮 . ࠦ MBR ,
㧮 ᥪ ᪥, 뢠   ᪠ COM- 
EXE-䠩.

 ࠦ MBR ࠥ ⠡ ࠧ ᪠,  १ MBR
 뫥  "FDISK/MBR".  ⠪ 㭨⮦ 䠩
C:\WINDOWS\SYSTEM\IOSUBSYS\HSFLOP.PDR.   ᮤন ஢
ப:

 Baphometh v2 ~CAD

 ᪥ ࠦ 䠩  ࠦ MBR, 墠뢠 INT 21h,
⠥ १⭮    ⥬ ࠦ 믮塞 DOS-䠩. 
㧪  ࠦ ᪠  墠뢠 INT 8 (⠩), 
㧪 DOS  ⥬ 墠뢠 INT 21h.  ⮬  ⠪
墠뢠 INT 13h   饭  ᪠ 뢠 ᢮ 楤
ࠦ  ⥫.

============================================================================
 CrazyPunk.500 (07-11-98)
 
H १ ஢ .  .COM-䠩  뢠
  . Cন ப:

 C ࠣ !
 (C) Crazy Punk

============================================================================
 Div.725 (03-09-98)
 
 १ ஢ . ᯮ ⨮⫠
ਥ.  ᪥  COM-䠩  뢠   ।. ⠢
᢮     墠뢠 INT 21h  ஬ ஢ ७
᪠ 䠩,  ᠬ 䠩  ࠦ - ,   
  ணࠬ.  ⮩ 稭  ⠥ १.

 ࠦ  ࠧ ᢮   4 ⪠ (ன ⮪
஢)  뢠   䨪஢ ᬥ饭  䠩: 0, 100h,
300h,    䠩, ।⥫쭮 ࠭ ࠥ   
䠩.

============================================================================
 Eka.4096 (03-09-98)
 
H १ . 墠뢠 INT 10h, 17h, 21h.  ᪥
ணࠬ   ⥪饬 ⠫ COM-  EXE-䠩  뢠  
.  ᨬ  ᢮ 稪  ᨬ    
ਭ.  ᨬ  ⥬ ᫮ 뢮 ⥪:

 ͻ
    Beware of the 'Virus   
              
               
                   
 ͼ

============================================================================
 Exe_vb, ᥬ⢮ (03-09-98)
 
 १ . 墠뢠 INT 21h  뢠  
EXE-䠩   ᪥. ਧ ࠦ 㦠 2   
䠩: "VB". H  .

============================================================================
 Hanko.4167 aka Monica (16-10-98)
 
 १ 䨪-⥫-. 墠뢠 INT 21h 
뢠   COM-  EXE-䠩   ᪥  ⨨. 
⨨, २  ⫠ ࠦ 䠩   .

ᯮ ᪮쪮 ஢ ஢,  ⮬ 楤
஢/஢   64-⭮ ⬥.   ⠪
 ⨮⫠  稥 ਥ, 㤭騥  .

7-   7:07  뢮 ⥪  訢 :

 My name is Monica. I'm your new virus. If you are a programmer,
 you can try to decode the author's info, that is encrypted somewhere
 in my body. The decryption routine is also implemented. You must only
 guess the key ...
 Good luck, friend. Now I stopped the computer. Press RESET, please.

 ⥫  ⢨⥫쭮  ப ⥪, ஢
64- ਯ-⬮   箬. ᫥ ஢ 
⥪ 룫廊 ᫥騬 ࠧ:

 Hi! You are really very good. So: My name is Michal Hanko, I'm from
 Czech Republic. I live in Letovice, Halasova street
 in Southern Moravia near Brno.
 My E-Mail is: hanko@math.muni.cz. Please, mail me
 that you've been succesful.
 Copyright (c) Majkl soft.

============================================================================
 Heiko.2184 (07-11-98)
 
 १ 䨪-. 墠뢠 INT 21h  뢠
  COM-  EXE-䠩   ᪥  ⨨.

⮦ ⨢ 䠩  CHKLIST.MS.  ᨬ  ᢮
稪  ⥬ ⠩: ࠥ CMOS;  뢠  䠩
砩 ;  墠뢠 INT 1Ch (⠩)  १ ஥
६  ன   ࠥ  (.   ).

 ᮤন ப:

 "Lord of the Dance";fuer Heiko, den ich fuer immer und immer liebe;
 (c) Wesley;rel. 1

 at s7=87s10=255dt0190332332
 at s0=1

============================================================================
 Foo.956 (30-09-98)
 
H १ ஢ .  COM-䠩  ⥪饬,
த⥫᪨ ⠫   C:\WINDOWS  ࠦ    㦥
䠩. 뢠   䠩. ४  ᠬ஢ન
COM-䠩 Windows32 ( ப "ENUNS"   䠩).

ᯮ ⨮⫠ ਥ.  29 ᫠ 뢮 ⥪  訢
:

 --FOO VIRUS--
 WE'RE ALL STARS NOW, IN THE DOPESHOW
 MADE IN THE UK, WE EXIST..

============================================================================
 Frizer.987 (03-09-98)
 
 १ .  .COM-䠩, ७ 砫 䠩 
   뢠  ᢮   砫   ࠦ
䠩. Cন ப:

 [ Spreader beta2 by FRiZER ]

        ᯮ 筮
ਣ  ࠦ 䠩. -,   ࠧ 
 .   ( 뢠 ᮬ  砫 䠩)
ᮤন 墠稪 ⫠ 뢠 INT 1,3  ⠡ 権
(. ). ன    ( ࠧ頥   䠩)
ᮤন ᥬ 樨, 믮塞 ᮬ  ᪥ 
ࠦ 䠩, .. ன   楤ன ࠧ .

᭮ ᮡ    䠪,  ᥬ  
஬  ᯮ  쭮 筮 浪.  ⠭⭮
  ( 䠩,  ,  ᮤন  ..) 
믮    ᮢ襭 ⢥ ⢨:  ॣ
㦠 ४  DOS-㭪権,  室   믮
DOS-맮 INT 21h    !

Hਬ,  ᯮ DOS-맮 INT 21h  뤥   
 ⥭/ (  룫廊 ४⭮),  ⥬ 
맮 INT 21h :

 MOV AH,48h     ; 뤥  
 INT 21h        ; DOS-맮
 ...
 MOV AH,1Ah     ; ⠭ DTA
 MOV DX,DI      ; DOS-맮 
 MOV AH,4Eh     ;  䠩
 MOV CX,0020h
 JNC ...        ; DOS-맮 

᫥騩  ⬠  뢠,    ᠬ 
뢠 INT 21h,   ⮬ ᯮ  INT 21h  ࢮ
.  ⮣, ⮡ ᮢ ⠪ ࠧ ⢨ 
ᯮ ⠡ 権  ࢮ  .  ⠡ ᮤন
ᯨ᮪ 㪠⥫  樨,   믮  ᪥ 
ࠦ 䠩.  ४⭮ 믮 , ਢ , 
ᯮ ਬ୮ ⠪ ⠡:

 㪠⥫   MOV AH,48h
 㪠⥫   INT 21h
 ...
 㪠⥫   MOV AH,1Ah
 㪠⥫   MOV DX,DI
 㪠⥫   INT 21h     ; 㪠뢠    INT 21h,   
 㪠⥫   MOV AH,4Eh
 㪠⥫   MOV CX,0020h
 㪠⥫   INT 21h     ; 㪠뢠    INT 21h,   
 㪠⥫   JNC ...

 ⮣, ⮡  믮 ⮫쪮   ( 室
⢮ 権),  ᯮ INT 1/3: ⠭ ०
஢, 믮   ࢮ 㪠⥫, ஢ 室
᫮, ⥬ 믮   ᫥饬 㪠⥫  ..

 १ ⠪ 筮 室  ᯮ 楤  ᮤন
⮫쪮    믮塞 樨 ( 祭 ।
᪫祭ﬨ). ᫨  室 믮 ,  㦥
   ,  ᥣ- 頥  ⮬  㪠⥫.

 ⮣,  ࠦ 䠩  ᪠  ᮤন  稥
権  ᢮ ண . ᫨ ⠪ 樨 㦥, 
⠭ 㪠⥫  ᢮ ⠡  ⥫ ࠦ 䠩 -  
 ᯮ  믮  ࠦ 䠩. ⢥,  
⮬ 砥   뢠 㦥 樨  ᢮ ன ,
 ࠧ ࠦ 䠩 㢥稢  祭 襥  .

 १ ⠪ ⮤ ࠦ  ᯮ  ࠦ
ணࠬ, ..    ࠦ 䠩,   "⥣" ᢮ 
  ࠦ ணࠬ.

============================================================================
 Hob (17-12-98)
 
 १ 㧮 ⥫-. 墠뢠 INT 13h 
ࠦ 㧮 ᥪ ᪥  ᪮ A:  MBR .
 ࠦ ⮫쪮  ⮬ 砥, ᫨ ⪫祭 ஥  BIOS
  ᮢ ( ⮣  ஢ ᮮ⢥饥 祭 
CMOS-).  ᮤন ப:

 h0b13BzZ

============================================================================
 HTML.Internal (07-11-98)
 
  , ࠦ騩 HTML-䠩.  饭  ࠦ
࠭   HTML-䠩  쭮 ᪥  ࠦ . 
ࠦ ᯮ ਯ, ᠭ  몥 Visual Basic. 
ࠧ ⮫쪮  ⮬ 砥,   㧥 ⪫祭
ᮮ⢥騥 Security settings,  ⨢ 砥  ᪥ 
㧥 뤠 ᮮ饭  訡.

 ࠦ HTML-䠩 ᮤন ,  
 ਯ  ⮬᪨ 믮塞  ⨨ 䠩 㧥஬,
..  ⨨ ࠦ HTML-࠭ ࠢ ⮬᪨
।   . ᭮ 楤   ⭮ 1/6 
ᨬ  ⥬ 稪 砩 ᥫ 뢠 楤
ࠦ,    *.HTM  *.HTML-䠩  ⥪饬  
த⥫᪨ ⠫  뢠   砫.  ࠦ
ࢮ砫쭮 ᮤন 䠩 ᤢ ,  ⮩ 稭  
 䠩  㠫쭮 ( ᬮ 㧥஬) ࠦ HTML-࠭
  ⫨  ࠦ.

ࢠ ப   ᮤন ⥪-䨪:

The virus header contains the text ID-line:

 <html> <!--1nternal-->

᫥ ࠦ  뢮  status-bar ᮮ饭:

 HTML.Prepend /1nternal

============================================================================
 HTML.Internal.b (01-12-98)
 
  ᯮᮡ,   ࢠ  ,  HTML-䠩  ⥪饬 
த⥫᪨ ⠫  뢠  , ..  㭨⮦
ࢮ砫쭮 ᮤন 䠩.   ᮤন ⥪⮢
਩ "HTML.Offline v0.1"  뫪  Web-࠭  .

============================================================================
 HTML.Internal.c (01-12-98)
 
쮭-:  HTM-䠩, २뢠   HTML (
ᨬ 'L'   䠩)  뢠 ᥡ  ࢮ砫 
ࠦ 䠩.  ᨬ  ⥬ 稪 砩 ᥫ
뢮 MessageBox:

 HTML.Redirect /1nternal

============================================================================
 HTML.NoWarn (01-12-98)
 
C⢮ HTML-ᮢ,  ⨢樨   㣨 HTML-䠩 
뢠   砫.  訥  ᥬ⢠ ᠭ ⥬
 ஬,    HTML.Internal,  ᫥   ᯮᮡ ࠦ
䠩:   ᠭ  ਯ-몥 Visual Basic  
-믮塞   HTML-䠩.

᭮ 楤   ⭮ 1/6  ᨬ  ⥬
稪 砩 ᥫ 뢠 楤 ࠦ,   
.HTM, .HTML  .HTT-䠩  ⥪饬   த⥫᪨ ⠫ 
뢠   砫.  ࠦ    䠩.

 ⠥  ⠭⭮ ।० ActiveX.  ⮣ 
뢮 ᢮ ᮡ⢥ , ஥ 뢠  ActiveX ᮮ饭:

 Are you sure you want to view the contents of this HTML document?

 ਥ ࠡ뢠 ⮫쪮  ⠭ ࠧ襭 ࠭ 800x600,
 ⨢ 砥  뢠 ᤢ  ஭. C 
,     ⮬  ⬥  ActiveX,  ⮫쪮
뢠  ⥪.

 ᪮쪮 ᨩ , ᫥ ࠦ  뢮  ப
ﭨ ⥪:

 "NoWarn.a":  HTML.NoWarn v0.1 /1nternal
 "NoWarn.b":  HTML.NoWarn v0.11 /1nternal
 "NoWarn.c":  HTML.Guess you shouldn't done that!!! /SwedisHit  ADOLF

============================================================================
 Innox.1333 (17-12-98)
 
H १ . 뢠   COM-  EXE-䠩. 
᪥ ࠦ 䠩    ࠦ 䠩  ⥪饬 
PATH-⠫, ⥬ 墠뢠 INT 21h, ⠥ १⭮ 
⥬   ࠦ 䠩   ᪥. 뢮 ⥪:

 Innoxious Bug 2.03 'The Sad Flasher' (c) 1994-96 Bugsoft-MSTU, Moscow.
 Dedicated to all the rock'n'roll people.

============================================================================
 Ithaqua.8030 (17-12-98)
 
 १ 䠩-㧮 䨪-. ࠦ MBR
, COM-  EXE-䠩   ᪥.  ࠦ MBR  
ࢮ砫쭮 ᮤন,  १ ⪠ ⠭ MBR 
  FDISK/MBR ਢ     e. 
ᯮ ⠪ ࠧࠧ ⨮⫠ ਥ, ஢
䨪-  ⮫쪮  䠩,    MBR. Cন 讥
⢮ 訡    䠩  MBR   ࠦ.

 ࠦ 䠩 ࠧ묨 ⮤  ᨬ  ᨨ DOS. 
DOS 7+ (Windows)  ࠦ ⮫쪮 EXE-䠩,  ⮬  
 COM-䠩  MBR.  ࠦ EXE   ᢮ 
512- 䨪-横  뢠   䠩.  䠩
 ⮬ 㢥稢  8542 .

 DOS 6    ࠦ COM-, EXE-䠩  뢠  MBR 
᪥ ࢮ ࠦ 䠩.  ࠦ EXE  뢠 
। 䠩, ᫨ ⠬  "" ( ﭭ )
室饣 ࠧ.  ⮬ 砥  䠩  㢥稢. 
ࠦ COM-䠩   ᯮ   ਥ,   
ࠦ EXE-䠩  DOS 7+   ⮬ 뢠  JMP_Virus 
砫 䠩,  뢠  室  ᢮   ।
䠩.  ⮣  뢠  COM-䠩    ஥ ६
㫨  ࠡ.   樨   ᨬ  ࠧ
᫮ 롨ࠥ    JMP_Virus.  ⮬   ᥡ
⮫쪮  XOR-横,   ࠦ 䠩 㢥稢  8030
.

 DOS 6  ⠪ ᯮ   । DOS-
ࠡ稪 INT 21h.

29 ५  뢠 -䥪: ४砥  -० 
뢮 ࠦ "饣 ᭥", ⥯ 뢠饣 ⥪:

 [Ithaqua] virus by Wintermute/29A

 ⠪ ᮤন ப:

 I'm Ithaqua,... that who walks over the wind
 Welcome to my world, adventurer. Follow me.
 Love. Hate. I'll be awaiting you on the dark side, watching the nonsense.

============================================================================
 Java.StrangeBrew (01-12-98)
 
  , ࠦ騩 ਫ Java (Java applications).
㦥   1998 . ᯮᮡ ⮫쪮  ⮬ 砥, ᫨
ࠧ襭 㭪樨 㯠  ᪮ 䠩, .. ࠦ 䠩
᪠  㭪樮쭮 ਫ Java (Java application).
  ᯮᮡ ࠧ  ᪥  묨 㧥ࠬ -
⥬ 뤠 ᮮ饭  ⥫쭮   ४頥 
믮.

 ᪥  appilcation  砥     ᪮묨
䠩,  ᭮  ஥  堭 ᪠  ࠦ
Java-䠩,   ⥪饬 ⠫ 稥 Java-䠩  ࠦ .

। ⥬,  ३    ࠦ Java-⮢,  ।
᢮ ᮡ⢥ 䠩 (䠩-⥫), ࠧࠥ  , ७
ଠ  ⥬ 뢠   ᢮ .  室   ⮩
稭,     ﭨ    ᢮   ⥬
 -  몥 Java  室  ⮣ 㭪樨.

⥬   Java-䠩 (䠩  ७ .CLASS), ࠧࠥ 
७ ଠ, ⠢  䠩 ᢮ ᮡ⢥ 楤  
  맮  ᭮  ࠦ 䠩.

᭠ 楤   Strange_Brew_Virus(),  稭 ண
 稫 ᢮ . Cப "Strange_Brew_Virus" ⠪  
ࠦ 䠩  ᬮ   ⥪⮢ ।஬.

============================================================================
 JFA, ᥬ⢮ (30-09-98)
 
H १ ஢ .  ᪥  COM- 
뢠   .   16   । ࠦ
䠩. । ࠦ 뢮 :

 I am !

 ᮤঠ ப:

 ... and justice for all.
 *.com

============================================================================
 July16.594 (03-09-98)
 
 १ .  ᪥  .COM-䠩  뢠 
 .    ⥪饬 ⠫ 䠩 *.TX*  뢠  
⥪:

 Need you, Dream you
 Find you, Taste you
 Fuck you, Use you
 Scar you, Break you
 Lose me, Hate me
 Smash me, Erase me

16  뢮 ⥪:

 Happy Birthday Christine!
 Your As Beautiful As Ever

============================================================================
 Kontragapi (30-09-98)
 
 १ 䨪-. ᯮᮡ ⮫쪮  1998 , 
⨢ 砥  ⠫ ᥡ   .  祭
ࠢ  墠뢠 INT 21h  뢠   COM-䠩
 饭  .   ⨢ ணࠬ:  ᫨ 
䠩 稭  F-, TB, AV, VIR, SCAN, KILL (F-PROT, TBAV, AVP  ..),
  뢠   砫  ணࠬ,  뢮 ⥪:

 kontragapi

H  "窨 室", ..   ⮢  ࠦ
ணࠬ.  JMP_Virus 室  ᢮  뢠  ।
䠩.  ⮣  ࠦ  뢠  䠩,
ᥬ    "室饥 "   JMP_Virus.

============================================================================
 Koths.2462 (07-11-98)
 
 १ 䨪-. 墠뢠 INT 1Ah, 21h 
뢠   COM-  EXE-䠩   ᪥. ஢ 
䠩   ࠦ: V3*, HW*, CO*, TV*, TB*, SC*, CL*, VP*.

Cন ப:

 ** [KOTHS.HWB virus] **
 This is beta test version
 Please.. tell me some bug in this virus
 And I promise you that next version will be smaller,faster and have no bug
 Of course,I will add side-effect into it :)
 c u next time

============================================================================
 Lacimehc.723 (03-09-98)
 
H १ ஢ .  ᪥  .EXE-䠩 
뢠   . 23   㬥஢ DOS-㭪権
"몫砥" ᪨ A:  B:  D:  E:  F:  G:  뢮 ᮮ饭:

Infected with Lacimehc, coded by KilJaeden of the Codebreakers 1998 on
17/06/98

============================================================================
 Lamerman, ᥬ⢮ (16-10-98)
 
祭  १ 䠩-㧮 . ࠦ MBR
  뢠  EXE-䠩   ᮧ 
䨪樨.  ᪥ ࠦ 䠩 뢠  MBR  訢
.  ࠦ MBR 室 BIOS-  ᮢ  
⮣ ਥ - 뢠 ᨬ 'Y'   . 
१㧪  墠뢠 INT 13h,  १⭮   
   EXE-䠩 뢠    ᢮ .

Cঠ ப:

 "Lamerman.a": Lamerman .01
 "Lamerman.b": Lamerman .02

============================================================================
 Lazarus.1457 (03-09-98)
 
H १ ஢ . 墠뢠 INT 21h 
뢠   COM-  EXE-䠩   ᪥  ⨨. H
ࠦ 䠩 COMM???.*, WIN.*, F-PR??.*, VIRS???.*, TBAV.*, SCAN.*,
MSAV.*, CPAV.*, CLEA?.*.   ᪥ ⠪ ⠥ ࠧ  
䠩: C:\DOS\FORMAT.COM, C:\WINDOWS\COMMAND\FORMAT.COM,
C:\WIN95\COMMAND\FORMAT.COM  㤠 䠩: ANTI-VIR.DAT, CHKLIST.CPS,
CHKLIST.MS. H ६ ࠡ ணࠬ MEM.EXE ᪨ ᢮ MCB-.
Cন ப ⥪:

 The Lazarus Virus (c) '98 The Shaitan/SLAM

============================================================================
 Levi.800 (30-09-98)
 
 १ . 墠뢠 INT 21h  뢠  
.COM-䠩   ᪥  ⨨. Cন 訡   訢
  ࠦ 䠩.  30- ᫠  CMOS  뢮 ⥪:

  !!! Attention !!!
 Welcom to the LEVI Virus
 I`m sorry for you --> =:(

============================================================================
 Lifeform.2101 (03-09-98)
 
祭  १ ஢ . 墠뢠 INT 21h 
뢠   COM-䠩   ⨨, ..  ࠦ 䠩
  ஢, 䨪樨  ᫥ ⥭   䠩. 
⨨  ⪥ ⫠ ࠦ 䠩    (⥫).
"蠥"  ࠦ 䠩; ६ 몫砥  楤 
᪥ ⨢ F-PROT  ⨫: ARJ, RAR, PKZIP, LHA, BACKUP.

 ⨢ AVPLITE  F-PROT:  ᪥ AVPLITE ⠢ 
 ப  ⬥ ᪮ ᪠஢; ᫨ F-PROT
뢠   䠩   ஢થ,    ⥭
砩묨 묨.  ⠪ 㭨⮦ ⨢ 䠩 :
ANTI-VIR.DAT, CHKLIST.MS, SMARTCHK.CPS, AVP.CRC, IVB.NTZ, CHKLIST.TAV. 
⫠    ஫ 㬬 CMOS  訢 .

23  ࠥ ଠ  ,  CMOS  뢮 ᮮ饭:

   [LifeForm] coded by ThE_WiZArD (1998)  
 Cooler than a body on ice, Hotter than a rollin`dice
 Wilder than a drunken fight ... You`re gonna burn tonight

 ᮤন ப:

 #ThE_WiZArD
 Quo vadis Fridrik? ... and you Frans still working on this shit.

============================================================================
 Locust.1456 (07-11-98)
 
H १ . 뢠  । COM-䠩. ࠦ
䠩 ⮫쪮  ᪥   -  ਫ (ਬ,
NortonCommander, DosNavigator  ..), ..  䠩 ᪠
 "COMMAND.COM /c ".  ⮣    ।
  䠩 COMMAND.COM  ࠦ . ⥬  ᪥ ࠦ
COMMAND.COM  ᪠  ப  뢠  ।
㪠   COM-䠩 (᫨ ).

 ᨬ  ⥪饣 ६   ⫠稪   
뢮 ⥪:

 I'm Sleep-walker.(LOCUST-3)

============================================================================
 Macro.Excel.Compat (03-09-98)
 
 , ࠦ ஭ ⠡ Excel. Cন  
㫥 11 㭪権: Macro1, Macro2, Macro3, Macro4, Macro5, Macro6, Macro7,
Auto_Open, Auto_Close, Auto_Exit, Auto_Help.

ࠦ ⠡ ந室  ⨨ 䠩, ४祭 ࠭ 
 ⠩.  ࠦ 䨪-  뢠  
 砩 ᣥ஢ ப .  ᭮ 
 ⠪ ࠥ 砩 ࠧ   ⥬ 稪
砩 ᥫ.

============================================================================
 Macro.Excel.Dado (30-09-98)
 
⠫᪨ -, ࠦ ஭ ⠡ Excel. Cন 
ᮢ  㫥 "conciente": auto_abrir, auto_cerrar, infectar, vv1,
contamina.  ࠦ ⥬ ந室 ⥬  ஢ 䠩
PERSONAL.XLM  ⠫ ⮧᪠ Excel.  ࠦ ⠡ 
墠뢠 楤  .

C  稫  ⥪ , 饣  砫 ᮢ:

 Dado Error IrA terminar

 ⭨栬  16:30 뤠 MessageBox:

                  GRACIAS A DIOS ES VIERNES !!!
 FAVOR DE APAGAR SU COMPUTADOR Y QUE TENGA UN BUEN FIN DE SEMANA

============================================================================
 Macro.Excel.Disaster (03-09-98)
 
ࠦ ஭ ⠡ Excel (XLS-䠩). Cন   㫥
"Disaster"  ᮢ: Auto_Open, Infect, Unvisible, Butterfly,
Auto_Close.

 ⨨ ࠦ 䠩 Excel ⮬᪨ 믮 
auto_open,  ।  Unvisible  믮塞 
⨢樨  ⠡ (Sheet).  Unvisible ᪠ 
Infect, ࠦ騩  ⨢ Workbooks.

 ६  䠩 믮  Auto_Close.   㤠
 ࠭  ,  稭騥  "Sheet",  뢠 ࠦ
䠩  ⠫ ⮧᪠ Excel (Startup Directory)   BOOK1.XLS.

 쭨  5 ᫠   ⭨栬 ᫥ 25 ᫠  ⨨
䠩 뢠  Butterfly,  ᮧ  ࠭  
"A"  㤠  ⠫.

============================================================================
 Macro.Excel.Guyan (05-09-98)
 
ࠦ ஭ ⠡ Excel. Cন  : auto_open,
al_muskilat. C  ⠫ ᪠ Excel ࠦ 䠩 PERSONAL.XLS.
⠭  ࠦ al_muskilat  ⨢ ⠡ (Sheet).

Cࠥ 㭪  "Tools/Macro...".   ᨬ  ⥬
 砩 ᥫ 뤠 MessageBox:

 Ha....Ha....Ha... [VBB]
 You've Been Infected By Guyan!

============================================================================
 Macro.Excel.Hidemod (30-09-98)
 
ࠦ ஭ ⠡ Excel. Cন  ᮢ: Auto_open,
Auto_close, ChangeCell, CreatePers, CheckV101, HideModV101  ᪮쪮
㭪権   㫥 "ModulV101".

 ࠦ ⥬ ஢ 稥 䠩 PERSONAL.XLS.  砥 
⢨ ᮧ     ⠫ (. ),  ⠫ ⥬
।  ⠫ ୠ⨢ ᪠ (alternate startup). 
롮 ⠫ ୠ⨢ ᪠  ⠥ ᮧ  
⠫ Windows:

 C:\WINDOWS\ALTSTART
 C:\WIN95\ALTSTART
 D:\WINDOWS\ALTSTART
 D:\WIN95\ALTSTART

᫨ ⠫ Windows  㦥,   ᮧ  । 
ୠ⨢ ⠫ C:\ALTSTART.

 ࠦ 㣨 ⠡  墠뢠 楤  ⨢樨,
 ⮬  ⠪ 뢠 ᢮ ⥫-楤: ᫨ 뢠
ࠦ ࠭,   ४砥    
.

 ⠪ 墠뢠 楤 ⮢ (ChangeCell)   ⭮
30%   祭 㭨⮦ 室   ⠢ 
 ⠭ १.

============================================================================
 Macro.Excel.Laroux.YZ (30-09-98)
 
ਠ  "Laroux". ᫥ 7 ࠦ  -䥪⮬:
 梥 祥 ⥪饩 ⠡ - १⮬   ⥪:

 larou
  XYZ

============================================================================
 Macro.Excel.Soldier (16-10-98)
 
 -, ࠦ ஭ ⠡ Excel. Cন
 㭪樨 c ﭭ묨 : Auto_Open, Auto_Close, Delay, Poly; 
᪮쪮 㭪権  砩묨 .

 ⨨ ࠦ ⠡ 㤠 ப  Format/Sheet/Hide 
Format/Sheet/Unhide... (⥫).  ⨨ ࠦ 䠩, 室騥 
⥪饬 ⠫.  ࠦ  ᨬ  ⥬ 稪
砩 ᥫ ⠢  砫 ᢮ ⥪ 㭪樨  砩묨
  砩묨 ப.

  ᨬ  砩 ᫠ 뢮   Excel 
ப:

 Microsoft Excel

============================================================================
 Macro.Excel.Spellcheck (16-10-98)
 
ࠦ ⠡ Excel. Cন   "MSExcel",  ஬
  ᮢ  㭪権: Auto_Close, Auto_Open, HasAddIn,
RepeatInfect, Infect, Payload.

 ⨨ ࠦ 䠩 ࠡ뢠  Auto_Open, ࠦ騩
⥬:  ⠫ -᪠   ୠ⨢ ⠫ ᮧ
ࠦ 䠩   SPELLCK.XLA. ࠦ 䠩 ⠪ ᮧ 
Add-In Excel, 祬  頥   ⥬ 㦥 
ࠡ뢠 ࠧ 樮 ⥬ MacOS  Windows.

뤠 MessageBox-:

 Thank you for using Microsoft Excel!
 Just in case you didn't know, the current date is:
 <>

Cন ப :

 Date Virus.
 Created: May 1, 1996.

 NOTE:
 The Date Virus was inspired by the Laroux virus.  While this particular
 macro virus is harmless, others are not!  This macro virus was developed
 to bring attention to the possible threat in the hopes that antivirus software
 will be developed to protect this application.

============================================================================
 Macro.Excel.Tabej (03-09-98)
 
ࠦ ஭ ⠡ Excel (XLS-䠩). C⮨    
 "tabej",  ᮤন  : auto_open, rx, inf,
auto_close.

 ⨨ ࠦ 䠩 Excel ⮬᪨ 믮 㭪
Auto_Open, ᮤঠ ⠫ . ᫨ ⥬  ࠦ, 
⠫ 뢠 ࠦ 䠩 TABEJ.XLS  Startup-⠫ 
  ⠭  ࠡ稪 ⨢樨 ⠡  ᢮
楤 ࠦ  ⥫ ( "inf"). C⥫-楤 㤠 
  ࠦ ⠡   ⨨  ᭮ ࠦ  
⨨.

============================================================================
 Macro.Excel97/Word97.Shiver (05-09-98)
 
ࠦ ࠧ ਫ MS Office: 㬥 Word  ⠡ Excel 
Office97.  ᮢ⨬  ࠧ묨 ਫﬨ Office97 ᯮ
㭨ᠫ쭮 몠 VisualBasic -  䠩 Word  Excel   
   .

ࠦ ⥬, 㬥⮢  ⠡ ந室   ⨨ (
AutoOpen  Word  Auto_Open  Excel).  ࠦ  ᯮ
㭪樨 Office97 ᯮ/   १ ⥪⮢ 䠩
C:\SHIVER.SYS - 뢠   ᢮ 室   ⥬  
 ࠦ ꥪ.

 Word  Excel  ࠭  ᯮᮡ:  ࠦ
ꥪ⮢ Word  뢠 ᢮     ᮢ
(NORMAL.DOT)   ࠦ 㬥.  ࠦ Excel 
墠뢠  ⨢樨 ⠡  ⠭   ᢮
 ShiverTime.   ⥬   ᯮ/ ७
   ࠦ ⠡.  ⠪ 뢠 ࠦ 䠩
PERSONAL.XLS  startup-⠫ Excel  ⠪ ࠧ ࠦ ⥬
 Excel.

 室  Word (AutoExit) ந室 ࠦ Excel.  ᯮ
DDE-:  ᪠ Excel  ஢   । 㤠
  , 室  ᮧ ࠦ 䠩 PERSONAL.XLS 
⠫ ⮧᪠ Excel. ࠦ Word  Excel ந室  ⨨
⠡ (Auto_Close).  ᪠ Word  ஢ ,
뢠 Visual Basic Editor  뢠    䠩
C:\SHIVER.SYS.

室 ⥪   䠩 C:\SHIVER.SYS  㤠 ᫥ ࠦ 
⥬ ᯮ  ୮ ࠦ Word, ᫨ ᭮  
 㤠 (뫥祭)  㬥  NORMAL.DOT.  ⮣   
 Word ( AutoExec) ஢  startup-⠫ Word 稥
䠩 WORD8.DOT. ᫨ ⠪ ,  ᮧ   뢠 
 ⪨  FileSaveAs.  ࠭ 㬥⮢   
        䠩 C:\SHIVER.SYS, ..
ࠦ 塞 㬥.  FileSaveAs 뢠 
䠩 WORD8.DOT ⠪   㭪権 ᯮ/ १ 䠩
C:\SENTRY.SYS.

 ஢ન  ᢮   ⥬  ᯮ ⥬
॥  뢠   "HKEY_CURRENT_USER\Software\VB and VBA Program
Settings\Office\8.0" 祭 ⥬ ࠦ/ ࠦ:

 Shiver[DDE] = ALT-F11
 Shiver[DDE] = NoNos(

 ਮ᪨ 頥   , ᮮ⢥⢥, 
ࠦ WORD8.DOT  PERSONAL.XLS  startup-⠫ Word  Excel.


 C 
 ----------------

  筮 ꥬ -  10K  VisualBasic.  ⮨ 
  "Module1",  ஬ ᮤঠ 18 ᮢ:

 AutoExec - - Word, ᮤন 楤 ୮ ࠦ Word
 AutoOpen - - Word, ᮤন 楤 ࠦ 㬥⮢ Word
 WordStealth -     ᮢ Word ⥫-
               ToolsMacro, FileTemplates, ViewVBCode
 AutoExit    - - Word, ࠦ Excel
 FindExcel   -  Excel
 PersonalFun - ᯮ  ࠦ Excel
 CheckMarker - ஢ઠ    ⥬ (஢ઠ ॥)
 MakeMarker  -   ॥ ଠ樨  稨   ⥬
 PXL_Done    - ᯮ  ࠦ Excel
 Auto_Open   - -㭪 Excel, 墠뢠 ⨢ ⠡
 ShiverTime  - 墠稪 ⨢樨 ⠡  ࠦ Excel
 wdTrigger   -    Word
 xlTrigger   -    Excel
 Auto_Close  - -㭪 Excel, ࠦ Word
 delay       - ᯮ  ࠦ Word
 wdReEvalInfection - ஢ઠ  ࠦ PERSONAL.XLS 
                     startup-⠫ Excel
 xlReEvalInfection - ஢ઠ  ࠦ WORD8.DOT 
                     startup-⠫ Word
 DDE_Info  - "誠", ᮤন "ࠩ"  :

  Shiver[DDE] by ALT-F11 with help from ALT-F4
  This is the first virus produced by The Alternative Virus Mafia (AVM)
        ALT-F4 - "I was born for dying"
        ALT-F11 - "Actions without thoughts"


 
 ----------

 ਬ ⥫-ਥ.  Excel  㯭묨 㭪 
Window/Unhide...   Tools/Macro,  Word ᮧ  NORMAL.DOT ⥫
-誨 ToolsMacro, FileTemplates, ViewVBCode.  ⬥
஥  Office97   ᮢ.

 ᨬ  ⥬ 砩 稪  ᫥騬
䥪⠬:

-  Excel  砩    30 窠 ⠢ ப
 "Shiver[DDE] by ALT-F11"    ⮩ 祩.

-  Word ᮧ  뢠   WRITE 䠩 C:\SISTER.DLL:

  Hey Man, I Kinda Like Your Sister
  Hey Man, I Hope That's Cool
  Hey Man, I Kinda Lose My Mind
  Every Single Time I Find Your Sister
  Suntanned By The Pool
  Hey Man, I Wanna See Her Naked
  Hey Man, I'm Always In Her Room
  All Alone When No One's There
  Going Through Her Underwear
  Hey Man, I Gotta See Her Soon
  Hey Man, I'll Never Get Her Pregnant
  But Hey Man, How Can I Resist Her
  The Day I Give Her A Wedding Band
  Are You Going To Be My Best Man?
  Hey Man, I Kinda Like Your Sister
  I Kinda Like Your Sister
  I Kinda Like Your Sister
  I Kinda Like Her

-  Word   CommandBars Controls

  Tools/Macro = "Shiver[DDE] by ALT-F11"
  File/Versions... = "Cum Stained Sheets..."
  Edit/Paste Special... = "Hey Man I Did Your Mom..."
  Insert/Break... = "Wanna do some MDMA ?"
  Help/About Microsoft Word = "Peace, Love and Drugs"
  File/Properties = "I'll die happy, you'll just die"
  Edit/Go To... = "Heywood Jablowmi"
  Tools/Word Count... = "Body Count"
  Format/Font... = "Cunt"
  File/Close = "No Clothes"
  Window/Split = "Blow Me"
  Insert/Picture = "Crusty Porn GIF"
  File/Print... = "My Balls Itch"
  Format/Bullets and Numbering... = "Pills And Needles"
  Table/Insert Table... = "Insert and Probe"
  Tools/Customize... = "Sodomize..."
  Tools/Spelling and Grammar... = "Spelling and Your Grandma..."
  View/Toolbars = "Gaybars"
  View/Master Document = "Masturbation"

============================================================================
 Macro.Word.Bond (03-09-98)
 
ਬ⨢ -. Cন 3 ࠪ᪨  
: AutoClose, BONE, BOND.   ⨨ 㬥⮢.
뤠 MessageBox:

 Any  Problem ?   Call  Mr.BoND,   OkEmi  ThanK  U

============================================================================
 Macro.Word.Cc (03-09-98)
 
H檨 -. Cন 5 ᮢ: wss, AutoExec, AutoOpen,
DateiSpeichern, DateiSpeichernUnter.   ⨨  ࠭
㬥⮢ (AutoOpen, DateiSpeichern). H稭  4- ᫠  
 ࠭ 㬥⮢  㣨  ⠭   ஫ "cc".

============================================================================
 Macro.Word.CheckF (03-09-98)
 
Cন ⢥    ChekFuk  㬥  AutoClose 
NORMAL.DOT. 㬥 ࠦ   ⨨ (AutoClose).

   ᮢ 뢠  室    (Form
field) ࠦ 㬥.  ⮣  ᮧ  㬥 
,  室 ண ⠭  ChekFuk.  ࠧ 
  室 ᮧ -.

 ࠦ 㤠  騥  䠩 . ⠭
஫ "ChekWarez"    ஥ 㬥,  ⮬ ᫥ 
ᬮ ᮢ   Tools/Macro.  15 ᫠ 뤠 MessageBox:

 Do you use ChekMate/ChekWord?

 ᨬ  ⢥ 뤠   MessageBox-:

 ChekFuk Virus
 Do NOT use ChekWord or ChekMate.
 They suck!

 ChekFuk Virus
 Thank you for NOT using ChekWare.

============================================================================
 Macro.Word.Crow (03-09-98)
 
ࠧ᪨ , ᮤন 3 : autoOpen, CROWFuck, ArquivoSalvar.
 ந室  맮 ᮢ autoOpen  ArquivoSalvar.
 ࠧ묨 ᯮᮡ:

1) 㡨ࠥ 㭪  ࠡ  ᠬ

2)  5- ᫠ ᫥     ᠭ 㬥 ⠢
ଠ:

 Title    =    The CROW_Fuck!!!
 Subject  =    nothing
 Author   =    The Best Virus Creator
 Comments =   Surprise!!! You Die!!!!!
   VOC FOI INFECTADO PELO VIRUS The CROW_Fuck - Macro - Fuck Microsoft,
             Mcafee, ThunderByte and more!!!
              !!! Bye Bye LAMMER !!!

3)  8- ᫠ ᫥ ५  ⠢  C:\AUTOEXEC.BAT 
㤠 䠩, ᫥ 祣 뤠 MessageBox:

 The CROW_Fuck - Macro virus
 Surprise!!! You Die!!!!!!
      > >  Brazil  < <

4) ᫨ ⥪饥 祭   祬 57, 뢮  StatusBar 
ப:

 The CROW_Fuck - Brazil - 97 !!!!!

5) ᫨  ⥪  50 ᫮, ⠢  砩  ஡. 
ᨬ  砩 ᫠   ⥪ ᫮ "CROW ".

6)  ⭨栬 ⠢  㬥 ⥪:

 CROW_Fuck - The Complete Macro Vrus
 Este vrus  dedicado a todos que pensam que o povo do terceiro mundo no
  capaz de criar coisas que tenham utilidade; aos Lammers, porque sem
 eles no daria para se disseminar o vrus;  Microsoft, por tornar to
 fcil a pirataria;  Mcafee, por seu Vir
 usScan ser totalmente burro e fcil de se enganar.
 See Ya
 The CROW

============================================================================
 Macro.Word.Delword (03-09-98)
 
Cন 8 ᮢ: Fake, Payload, AutoOpen, FileSave, AutoClose,
FilePrint, FileSaveAs, StealthActivate.

ࠦ NORMAL.DOT ந室  ⨨  ⨨ ࠦ
㬥 (AutoOpen, AutoClose),  㬥⮢ -   ࠭ 
࠭  㣨  (FileSave, FileSaveAs).

 29 ᫠   㬥⮢ 㭨⮦  ᮤন, ᫥ 祣
뤠 MessageBox:

 Mwahahaha... Bye bye Report...I hope you didnt work on this for too long :)

    㬥⮢  뤠 MessageBox  ᮮ饭:

 No Printing Today!

============================================================================
 Macro.Word.Dirty (05-09-98)
 
ਬ⨢ -, ᮤন  : AutoOpen, AutoClose. 
⨨ 㬥⮢ ࠦ   ᮢ. 㬥
ࠦ   ⨨. H ᥡ  .

============================================================================
 Macro.Word.Dot666 (03-09-98)
 
 檨 -. H  . Cন 3 :
AutoClose, ExtrasMakro, DateiDokVorlagen.  ந室 
⨨ 㬥⮢ (AutoClose). ⠫   
ࠡ稪 㭪権 ।஢ ᮢ (File/Templates 
Tools/Macro)  檮 ᨨ Word.

 ᯮ  ⮤ ࠦ ⥬.  AutoClose
  NORMAL.DOT,   ⠫  (ࠡ稪 
ᬮ/।஢ ᮢ) 뢠  䠩 666.DOT  ⠫
⮧᪠ Word.  ࠡ뢠     ᮢ AutoClose
७  NORMAL.DOT  䠩 666.DOT,  ⥬  砭 ࠡ 
ᠬ  ⠭  ࢮ砫쭮 .   ⠪
ਥ  頥 ᥡ  㦥    ᮢ
(⥫).

  ࠧ  ,  砩 ࠧ  
᢮ 㭪権  ६.

============================================================================
 Macro.Word.Fhd (30-09-98)
 
Cন  : AutoOpen, FileSaveAs, ToolsMacro. 뢠 
  ᮢ  ⨨ ࠦ 㬥 (AutoOpen).
 ࠦ   ࠭  㣨  (FileSaveAs).

 맮 Tools/Macro 㫨  ࠡ  ᠬ, ⠢ 
   祭  ப,  ᯨ᪥ ᮢ  ⮬ 
⢥  "PresentIt".

 30  31 ᫠  ᮧ  ᪠ ᪨ 䠩 FUCKHD.COM,
 ⠥ ( 設⢥ 砥 - ᯥ譮)   ⪮
᪥ 1280   ᥪ஢.

============================================================================
 Macro.Word.Flu (03-09-98)
 
஢, ᮤন ᥬ ᮢ: AutoExec, AutoOpen, FileOpen, FileSave,
Influenza, FileSaveAs, ToolsMacro(⥫). 뢠   
ᮢ  ⨨ ࠦ 㬥 (AutoOpen), 䠩 ࠦ 
 ࠭ (FileSave).

10 ᥭ  16 ५ 뤠 MessageBox:

 Don't work too hard. Relax for a moment. It's your birthday!

⥬ ᮧ 䠩 C:\FLU.BAT  뢠   :

 echo Just get back to work... I will not do anything to your computer!

 맮 Tools/Macro 뤠 MessageBox:

 You cannot create, edit or delete your macro right now!
 It's being updated.. Sorry for the inconvenience.

 ᮤন ப-ਨ:

 This macro is dedicated to my girlfriend, RS
 The one who love me and always do her best for me
 And I make this as a gift
 To always memorize her love, and mine too....

 RS, I Love You...

 Dibuat di Jakarta
 Tanggal 29 September 1996

============================================================================
 Macro.Word.Formater (30-09-98)
 
Cন  ᮢ: AutoExec, AutoOpen, DLLError, ToolsMacro,
ToolsCustomize.   ⨨ 㬥⮢.  䠩 WIN.INI 
ࠧ [Formater], 㭪 Activated ᮤন 稪, 㢥稢騩 
   ᪥ Word  ࠦ NORMAL.DOT.

20    Word  ᮧ  㬥  ᪠ 
ࢮ ⥪⮢   ப:

 Word Macro Virus Formater!!!  by Formater . This is my birthday!
 I'm <1998   ⥪饣 > years old! Don't try to find me...

 ࠡ뢠 ᮢ ToolsMacro  ToolsCustomize 뢮 MessageBox:

 Formater
 Cannot find FORMATER.DLL. Windows
 needs this file to run winword.exe

 ᪥   ᮢ 20   뤠 InputBox   
ப "Formater",  蠥 ࠡ Windows:

 Formater
 I'm a Word Macro Virus! I said: 'Don't try to find me!!!' You didn't
 listen to me! Enter my name, or I will quit from Word without saving
 documents! (do not press Cancle)

 ᮤন ப :

  _____ ___  ____  __  __    _  _____ _____ ____
 |  ___/ _ \|  _ \|  \/  |  / \|_   _| ____|  _ \
 | |_ | | | | |_) | |\/| | / _ \ | | |  _| | |_) |
 |  _|| |_| |  _ <| |  | |/ ___ \| | | |___|  _ <
 |_|   \___/|_| \_\_|  |_/_/   \_\_| |_____|_| \_\

      The Word Macro Virus by Formater '98

============================================================================
 Macro.Word.Gabi (03-09-98)
 
ਬ⨢ -. Cন 3 : AutoClose, Gabi1, Gabi2.
  ⨨ 㬥⮢. H ᥡ  .

============================================================================
 Macro.Word.Gavin (03-09-98)
 
஢, ᮤন ⢥ :  NORMAL.DOT   FileSave, 
㬥 - AutoOpen. 뢠    ᮢ 
⨨ 㬥⮢ (AutoOpen). ࠦ 㬥⮢ ந室  
࠭ (FileSave).

 ࠦ ⥬ (NORMAL.DOT) ࠭ ⥪   䠩
CONTROL.INI  ࠧ [MS-Word]  㭪 Compatibility  १ 28 
 ப -४樨: "Microsoft" -> "Microbollocks".

Cন ਩:

     Gavin's Word Virus V2.0 - 1996
           Platform Independant
         *** NOT FOR RELEASE ***
 In emergency contact gr.brock@ic.ac.uk

============================================================================
 Macro.Word.Ivana (03-09-98)
 
Cন 7 ᮢ: Bold, Ivana, EditUndo, AutoClose, Underline,
ToolsMacro, FileTemplates.   ⨨ 㬥⮢.

᫨ 祭 ᥪ㭤 ⥬ ६  15,  ⬥
Edit/Undo.  ᥭ 㡨ࠥ  ToolsBar ப ଠ஢, 
쭨 뢠 ScrollBar.

 13 ᫠   ⠢   㬥 ⥪:

  Na kraju, samo jos da kazem: volim te, Ivana [by utik]
  And finally, I would like to say: I love you, Ivana [by utik]

4  ⠢   㬥 ப "Ivana"  ⠭ ⠪ 
஫  㬥.

  Ivana ᮤন ப :

 Dedicated to Ivana, the only one
 [by utik]

============================================================================
 Macro.Word.Kiffer (30-09-98)
 
H檨  -. Cন 6 ᮢ.  ࠦ 
  ᮢ  砩 ࠭묨 (random) :

 㬥         MICROSOFT.DOT (ࠦ Word)

 <random>          dateispeichernunter
 extrasmakro       extrasmakro
 dateischlieen    <random>
 dateidokvorlagen  dateidokvorlagen
 <random>          <random>
 autoopen          <random>

ࠦ ⥬ ந室  ⨨  ⨨ 㬥⮢:  ⠫
⮧᪠ Word ᮧ ࠦ 䠩 MICROSOFT.DOT. ࠦ
㬥⮢ ந室   ࠭  㣨 .

楤 ࠦ 室    砩 ,   
㬥   ஢ ਠ    ࠡ
஢뢠.  random-ᮢ ࠭  ६ 㬥 (
砥 ࠦ 㬥),   ⥬ 䠩 WIN.INI  ࠧ
[embedding]  㭪 vxdRNDM, TaskRNDM, SystemRNDM ( 砥 䠩
MICROSOFT.DOT).

 30- ᫠  뢮 ᮮ饭:

 Leeglize Cannabis !! R.M.M  (C) by MaD KiFFeR 05.09.98

 15- ᫠   䠩 AUTOEXEC.BAT ,  뢮 
横 ப:

 Infected with RnDm MuTanT MuTaGeN (c) MaD KiFFeR 05.09.98

 ᮤন ਨ:

 ***********************************
 *     WM RnDm MuTaNt MuTaGeN      *
 *         vers Beta               *
 *      Polymorphism/Stealth       *
 *       encrypted by RMEG         *
 *Random Macro Encryption Generator*
 *  fools F/WIN32 1.13, F/WIN 4.38 *
 *  Winguard, F-PROT3/F-MacroW1.1  *
 *            etc.!!               *
 *    only works with WORD95ger    *
 *      F**k slow WordBasic        *
 *   special Thanx to [SLAM] Mag   *
 *       05.09.98 /Germany         *
 *        (c)by MaD KiFFer         *
 ***********************************

============================================================================
 Macro.Word.Kombat (03-09-98)
 
Cন 2 a: AutoOpen, AutoClose.   ⨨ 䠩
(AutoOpen).  ⨨ 㬥⮢ ࠥ 20 ப ⥪  砩
࠭  ⠢ ᮮ饭:

 MORTAL KOMBAT I

============================================================================
 Macro.Word.Query (30-09-98)
 
஢ 筮 ⮩ -, ᮤন  :
AutoOpen, Query. 뢠    ᮢ  㬥 
⨨ (AutoOpen).  ᨬ  ⥬ 砩 稪
뢮   MessageBox-:

 You have been visited by The Inquisitor. Innit. Homeboy. (Inquisitor 3 Virus)
 Sod WordBasic! Use Visual Biscuit! (Inquisitor 3 Virus)
 Virus? Virus My Anus! (Inquisitor 3 Virus)
 You Bloody Simpleton! (Inquisitor 3 Virus)
 Arse Biscuits! (Inquisitor 3 Virus)

C ⭮ 1% 㭨⮦ ᮤন ⥪饣 㬥.

============================================================================
 Macro.Word.Tomsk (03-09-98)
 
Cন ⢥  AutoOpen  ࠧ  ⨨
㬥⮢. H  . Cন ப :

 hnoVs(tm) fr MirSft Wrd 6.-7.
 () 1997-98 chnSft frm msk

============================================================================
 Macro.Word.Ultras, ᥬ⢮ (03-09-98)
 
ࠦ 㬥 Word. ࠦ 䠩  쭮 ⥬ 
ᮢ ந室  ⨨  ⨨ 㬥⮢.

 Goblin
 
 ୨ ᮧ  ᪥ ய  "Zoo.383.b", ⠢ 
C:\AUTOEXEC.BAT   ᪠, ᫥ 祣 뤠 MessageBox:

 ULTRAS...
 GoBLiN II by ULTRAS
 Thank you Dirty Nazi [Stealth group WorldWide]
 for such beautiful virus.

 Joke
 
뢠 ⥪ "Ultras/Joke/ULTRAS2.usa.net"   "/樠/"
짮⥫ 㬥.   ⥬ ॥   짮⥫
  Word:

 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
  RegisteredOwner=ULTRAS
  RegisteredOrganization=Rioters
  ProductName=JoKe By ULTRaS
 HKEY_CLASSES_ROOT\WORD.DOCUMENT.6\DefaultIcon\
  C:\Windows\System\Shell32.dll,31
 HKEY_CLASSES_ROOT\Word.Template\DefaultIcon\
  C:\Windows\System\Shell32.dll,32

============================================================================
 Macro.Word.Vivi (07-11-98)
 
஢, ᮤন 17 ᮢ:

  㬥       NORMAL.DOT
  AutoExec        Vaca
  AutoOpen        AbreAiMeu
  FeCheiCya       AutoClose
  DiaAgora        DiaAgora
  Acao            Acao
  ToolsMacro      ToolsMacro
  Invisivel       ToolsCustomize
  Invisivel       FileTemplates
  FerramMacro     FerramMacro
  Invisivel       FerramPersonalizar
  UtilMacro       UtilMacro
  Invisivel       UtilPersonalizar
  Invisivel       Invisivel
  KillChico       KillChico
  EliaShim        EliaShim
  AlevirusSCS     AlevirusSCS
  Ale             Ale

ࠦ ⥬  ᮢ ந室  ⨨ 䠩
(AutoOpen). ࠦ 䠩 ந室   ⨨ (AutoClose).
Cন ⥫-楤: 㫨 ࠡ  ᠬ   Tools/Macro.

19  ய뢠  C:\AUTOEXEC.BAT  ଠ஢ .
 ४ਨ C:\VDOC, C:\CHICO. C  ந뢠 㪮 䠩
"C:\WINDOWS\VOZ\ALE.WAV". 뤠    ⥪⮬:

  Visite a pagina das Putas!Aideticas!!
 Bem vindo novamente!!ola sou eu denovo Viviane Veloso!!
 Gostaram de minha foto peladona ento no perca tempo pegue o telefone e
 ligue para mim, adoro dupla penetrao anal e oral!!
 Namorado CORNO Telefone da EMPRESA = (011)4502331 Nome = NEY Corno conformado
  (011)2151966 Telefone da minha casa ligue para o CORNO tb

Cন ப :

 Macro Virus Criado Por Alevirus S>C>S 02/26/98 Brasil Virii Maker's
 Voce Decryptou muito bem!!!! Parabens!! Shit voce no coisa melhor
 pra fazer do que ficar abrindo Virus dos Outros???
                <Virus> Vivi

============================================================================
 Macro.Word.White (30-09-98)
 
Word--,  㬥  ⥬ ᮤন ࠧ筮 ᫮
ᮢ  ࠧ묨 .  ࠦ 㬥 ᮤন 3 ,
 ᮢ 롨  ᯨ᪠: AutoOpen, AutoClose, FileTemplates,
ToolsMacro, FileOpen, Einstein.

 ࠦ ⥬  ࠡ뢠 ⮬,  ⮬  ᮧ 
⠫ ⮧᪠ Word 䠩 NARMOL.DOT.   ᮤঠ 
: Einstein, FileOpen, FileTemplates, Show.

Cন ப :

 Einsteinium v.1.1.  (White Virus)
 Solidarity  M  Forever
 Medan 1997

============================================================================
 Macro.WORD97.Aljadezz (30-09-98)
 
 -, ᮤন 12 ᮢ   㫥 "aljadezz":
FileSaveAs, Mutate, EditFind, AutoOpen, FileSave, FilePrint, Inserta,
ToolsMacro, ViewVBCode, ToolsCustomize, FileTemplates, Retro.

  ࠡ뢠 ᮢ: FileSaveAs, EditFind, AutoOpen,
FileSave, FilePrint. ᯮ  堭, ⠢騩
ப-ਨ   ᮢ.

 ⨢樨  EditFind 㤠 ⥬ 䠩:

 C:\WINDOWS\WIN.COM
 C:\CONFIG.SYS
 C:\AUTOEXEC.BAT
 C:\COMMAND.COM

  (FilePrint)   ࠭  ⥪⮬:

 -=INFECTADO CON EL ALJADEZZ VIRUS=-

 ⥬ 㤠 䠩:

 C:\WINDOWS\*.*
 C:\*.*

 ⠪ 㤠 ⨢ ணࠬ:

 C:\Archivos de Programa\AntiViral Toolkit Pro\Avp32.exe
 C:\progra~1\Antivi~1\Avp32.exe
 C:\Archivos de Programa\AntiViral Toolkit Pro\*.avc
 C:\progra~1\antivi~1\*.avc
 C:\f-macro\f-macro.exe
 C:\f-prot~1\f-macro.exe
 C:\Archivos de Programa\Command Software\F-PROT95\Sign.def
 C:\progra~1\comman~1\f-prot95\sign.def
 C:\Archivos de Programa\Command Software\F-PROT95\Dvp.vxd
 C:\progra~1\comman~1\f-prot95\dvp.vxd
 C:\Archivos de Programa\McAfee\VirusScan95\Scan.dat
 C:\progra~1\mcafee\viruss~1\scan.dat
 C:\Archivos de Programa\McAfee\VirusScan95\Mcscan32.dll
 C:\progra~1\mcafee\viruss~1\mcscan32.dll
 C:\Archivos de Programa\McAfee\VirusScan\Scan.dat
 C:\Archivos de Programa\McAfee\VirusScan\Mcscan32.dll
 C:\Archivos de Programa\Norton AntiVirus\Viruscan.dat
 C:\progra~1\norton~1\viruscan.dat
 C:\Archivos de Programa\Symantec\Symevnt.386
 C:\progra~1\symantec\symevnt.386
 C:\PC-Cillin 95\Scan32.dll
 c:\pc-cil~1\*.dll
 C:\PC-Cillin 95\Lpt$vpn.*
 C:\PC-Cillin 97\Scan32.dll
 C:\PC-Cillin 97\Lpt$vpn.*
 C:\Tsc\PC-Cillin 97\Scan32.dll
 c:\tsc\pc-cil~1\*.dll
 C:\Tsc\PC-Cillin 97\Lpt$vpn.*
 C:\TBAVW95\Tbscan.sig
 c:\Tbavw95\Tb*.*
 C:\Tbavw95\Tbavw95.vxd
 C:\Archivos de Programa\Norton Antivirus\*.*

============================================================================
 Macro.Word97.Antimarc (03-09-98)
 
ࠦ 㬥 Word97.  ᯮ  ᢮ ࠧ
chat-⮪ mIRC  MS Outlook Express.   
-ᮬ, ᯮ騬  ᢮ ࠭  mIRC 
஭  Outlook.  ᮤন ப-ਨ:

 W97M/antiMARC by Lord Natas [Codebreakers 98]
 with special thanks to Rhape79
 "We're just the toys in the hands of another"

  ᮤন 15 ᮢ   㫥 "Antimarc": antiMARC,
mIRCDropper, OE, Delay, AutoClose, AutoExec, AutoOpen, FileClose, FileExit,
FileSave, FileSaveAs, ToolsMacro, FileTemplates, ViewVBCode, FormatStyle.

᭮ ᮬ   antiMARC, ⠫  
"誠",  뢠    ࠦ ⥬  㬥⮢.
 mIRCDropper  OE  ᮮ⢥⢥ 뫠   chat-
mIRC  뫠 ࠦ 쬮.

   । Word ந室  ࠡ뢠  
-ᮢ  ᪫祭 AutoExec.  ࠦ  ᯮ
㭪樨 ᯮ/ ᢮  १ 䠩 SYSTEM\MICROSOF.386,
 ᮧ  ⠫ Windows.

 ᨬ  砩 ᫠  ⠪ 뢠 楤 뫪
᢮  १ chat-⮪ mIRC  ஭  Outlook. 뫪
  chat- 믮 ।⢮ chat-ணࠬ MIRC32.EXE. 
ᮧ  ᪥ ࠦ 䠩 C:\WINDOWS\XXXPASSWORDS.DOC  뢠 
䠩 C:\MIRC\SCRIPT.INI ਯ 뫪 ⮣ 䠩. ।⥫쭮 
⬥ 뤠 ।०  ⥬ 䠩 mIRC C:\MIRC\MIRC.INI.

᫥ 室 ࠦ   chat-७, ਯ 
뫠 ࠦ 䠩 XXXPASSWORDS.DOC ᥬ ᮥ騬  
짮⥫. ᫨    ᮮ饭,  ஬  ப
"marcsux",  "宧鶴" ⮣ ᮮ饭 뫠 ⥪ "#gotinfected777
X".  ⠪ 뫠   ⥪:

 marc FuCk YoU FaScIsT
 warblade STILL SUCKING MARC's COCK?? eh, sure you do!!
 super Hey M0therfux0r, shove X/W up yer fat pimple-covered ass!
 super 'We do not support the distribution of virii' - i guess you do now,
bitch!
 #gotinfected777 Kick Me! - I'm InFeCtEd!


 뫪 ࠦ 㬥  ஭  MS Outlook Express
 ᮧ  ᪥ C: ࠦ 㬥 ( 䠩 - 砩),
롨ࠥ 20-   ᯨ᪥ ᮢ Outlook,    ᮧ 
쬮  砩 ᣥ஢묨 ᨬ  ⢥ ⥪, ⥬
⠢ ࠦ 䠩  뢠 ப:

 J97Z/nagvZNEP ol Ybeq Angnf [Pbqroernxref 98]

楤 뫪 ࠦ ᥬ १ ஭  
㭨ᠫ쭠: ४⭮ ࠡ⠥  ⮫쪮  檮 ᨨ Outlook
Express.

============================================================================
 Macro.Word97.Beep (30-09-98)
 
쭮 ⮩ Word--. Cন ⢥  AutoOpen 
ࠦ ⥬  㬥  ⨨ 䠩.  ᥡ
᪨  .

============================================================================
 Macro.Word97.Carrier (30-09-98)
 
Cন 3    "ThisDocument": Document_Close, Document_New,
Document_Open,  2   㫥 "Agent": AutoOpen, FileSaveAs.

 ࠧ  ⨨, ⨨  ᮧ 㬥⮢.
 ந室 ⥬ ᯮ/ ᮢ १ 䠩
C:\NORMAL.BAS  NORMAL.DOT  C:\DOCUMENT.BAS  㬥⮢.

Cন ப ,  ன । ࠦ 㬥:

 REM WRITTEN BY LORD ARZ

⠭     Word:

 Infected by the Carrier virus (a trooper has already landed)

============================================================================
 Macro.Word97.Class (19-10-98)
 
䨪-⥫--. Cন 2    㫥
"ThisDocument",   ࠧ :

 㬥         NORMAL.DOT

 AutoOpen          AutoClose    - ࠦ
 ViewVBCode        ToolsMacro   - ⥫

ࠦ ⥬  ⨨ ࠦ 䠩,  ⮬ ᯮ ᢮
  䠩 C:\CLASS.SYS  ⠢   NORMAL.DOT . ࠦ
㬥⮢ ⢫ ⥬  ࠧ   ⨨.

䨪-堭  砥  ⠢    ப
,  ਩ :  짮⥫, ⥪饥 ६ 
, ଠ樥  ⨢ ਭ.

ᯮ ਣ ਥ   ᢮ :  
ᯥ樠    ࠦ ⠢ ᢮    
ᮢ 㬥 (    -),    ⠪
뢠 ᮢ Word -  ⠭ 楤 ࠡ⪨ ᮡ⨩ 
 Word. ..  뢠   ⥫쭠 -ணࠬ, 
 "த"  Word,       Tools/Macro 
File/Templates (祬 ⮣  墠뢠 ToolsMacro - ⭮).

 ⠪ 몫砥  VirusProtection,  31- ᫠ 뢮
MessageBox:

 This Is Class
 -------------------
       VicodinES     /CB    /TNN      
 -------------------

============================================================================
 Macro.Word97.Cyberhack (03-09-98)
 
Cন 23   㫥 "CyberHack": coba, CyInit, CyClose, Dok2Nor,
Nor2Dok, Cyber, Tahan, Simpan, AutoOpen, FileClose, FileOpen, FileSaveAs,
FileSave, HelpAbout, FileExit, ToolsOptions, FileNew, FileTemplates,
ToolsMacro, ToolsCustomize, ToolsCustomizeKeyboard, ViewVBCode, Organizer.

  ࠡ뢠  -.  㭪 
Tools/Macro.  㤠 맮 " ", ᯮ騥 
ᬮ ᮢ.

 ⭨  맮 㭪  Help/About   ⨨ ਫ
Word  뢮 ࠦ ஢    .

 ᮤন ப :

 Macros By WinK'S Hacker
 Picture By Casper Satan

 Lebih baik mencoba dari pada tidak tahu sama sekali ...
 Mohon ma'af bila telah mengganggu Anda.
 Microsoft memang gila ! Nambahin fasilitas pemrogramannya
 keterlaluan untuk suatu word prosesor.
 jangan harap kau datang lagi padaku

============================================================================
 Macro.Word97.DasWoo (03-09-98)
 
C⥫-䨪-. C⮨   㫥: ThisDocument  VC. 
ThisDocument ᮤন ⢥ , 騩 -: AutoOpen 
㬥  AutoClose  NORMAL.DOT.   ⥬ 뢠 
ࠦ UserForm_Click, ᮤঠ騩  㫥 VC. C⢥⢥
ࠦ 㬥⮢ ந室   ⨨,  ⥬ ࠦ 
⨨ ࠦ 㬥.

ࠦ ந室   ᯮ 㫥   䠩 C:\ONE.SYS 
C:\TWO.SYS. ᫥ ஢ 䠩  㬥  ⠪ ந
⠢,   㤠  ப.   ⮣   ,
ࠧ騩  㬥  NORMAL.DOT, ਬ,    
NORMAL.DOT   ViewVBCode  ToolsMacro (⥫).  ⮣
 ⠢  ᢮  ப-ਨ, ᮤঠ騥  짮⥫,
⥪饥 ६   祭 ਭ.

28   뤠  :

  In Loving Memory
      WOOBIE
     -=-=-=-=-
      Das Woo
 R.I.P. July 28, 1998
     We Love YOu
      -=-=-=-=-
      1992-1998
  You Will Be Missed

============================================================================
 Macro.Word97.Dna (16-10-98)
 
-⥫-, ࠦ 㬥 Word97. Cন 10 ᮢ  㫥
"DNA": AutoOpen, AutoClose, AutoExit, FileSaveAs, filesave, fileclose,
fileprint, viewvbcode, ToolsMacro, FileTemplates.

 ந室  ⨨ 㬥⮢,  ⨨, ࠭ 
࠭  㣨 . ࠦ ⥬ ந室 : ᭠砫
ࠦ 䠩 NORMAL.DOT   ᯮ/   १ 䠩
C:\DNA.SYS, ⥬ ⥪騩 ࠦ 㬥 뢠  ⠫
-᪠ Excel.

 ᮧ  ᪠ 䠩 C:\.COM, ࠦ ᮬ "Dna.1206".
 맮  "Tools/Macro/Visual Basic Editor"  뤠 MessageBox:

 MS Word message
 Visual Basic not available.

============================================================================
 Macro.Word97.Dreams (05-09-98)
 
Cন 5 㭪権   㫥 "Dream": AutoOpen, FileOpen, FileNew,
FilePrint, FileExit.   ࠡ뢠   㭪権, ..
 ⨨, ᮧ   㬥⮢.  ࠦ ᯮ
㭪樨 ᯮ/   १ 䠩 C:\CONFI~1.~YS.

 室  Word  ᨬ  砩 ᫠ 뢠 ⥪騩
㬥    : HARDCORE.DOC, HEROINKILLS.DOC, LESBIANS.DOC,
DESIRE.DOC, GRAVITYKILLS.DOC, R.I.P-TALON.DOC, HOPE.DOC. 㬥
࠭  ᨬ     M: ( 15 ᫠)   F:
(稭  15- ᫠).

 㭪  "Tools/Macro"  "Tools/Templates and add-ins...". 21
᫠ 筮 ᮧ 䠩 C:\WINDOWS\DREAMS.TXT  뢠  
⥪:

 .-=BadDReAms=-.
 When you sleep
 Do you see an angel in the dying light
 Or can you see someone standing outside
 Trying to set you alight.
 Maybe you`ve seen Someone Somewhere before
 That I might have loved had I never loved you
 But you only see Me In bad dreams

============================================================================
 Macro.Word97.Gipsy (16-10-98)
 
-, ᮤন  ᮢ  㭪権   㫥 "GIPSY":
AutoOpen, Payload, FileSaveAs, FilePrint, ViewVBCode, ToolsMacro. ࠦ
쭮  ᮢ ந室  ⨨ 㬥⮢, 㬥
ࠦ   ࠭  㣨 .

 Payload  ᨬ  稪 砩 ᥫ  뤠 Balloon:

 The Gipsy Virus:
 Copy me, I like to travel

 ⠢  C:\AUTOEXEC.BAT , 뢠騥  䠩 C:\COMPUTER.V
ப "Help me I'm sick":

 @echo off
 echo Help me I'm sick >>C:\Computer.V

24   뤠 Balloon:

 BiologicBeast Virus:
 Mary Christmas...  don't work at this day

============================================================================
 Macro.Word97.Horn (30-09-98)
 
Cন  : AutoOpen, LittleHorn. ࠦ ⥬  ⨨
䠩 (AutoOpen). ࠦ 㬥⮢ ந室  ⨨  "e" -
 ⮣ ⠭ ᢮  ࠦ 㬥⮢ LittleHorn 
ࠡ ⮩ .     ᥡ.

============================================================================
 Macro.Word97.Inquisitor (03-09-98)
 
Cন 7 ᮢ   㫥 "Module1": AutoOpen, Inquisitor97, n, a,
ToolsMacro, ViewVBCode, Payload.  ந室  ⨨
㬥⮢.  ᨬ  稪 砩 ᥫ  맮 㭪 
Tools/Macro   ⥪饬 㬥  ᨬ "e"  "s".  맮
㭪  Tools/Macro ⠪ 뤠 MessageBox:

 You have been infected by Inquisitor97

============================================================================
 Macro.Word97.Jedi_Magic (03-09-98)
 
Cন  㣪樨 AutoOpen  AutoExit  㫥 Jedi_Magic. 
 ⨨ 㬥⮢.  ࠦ   ᮢ 
⠭:

 UserName = "O.B.1. Canobi"
 UserInitials = "OBC"
 UserAddress = "BOOGZI BARBERS ... Food Buster!!!"

 㬥 ⥪ ᢮ ⢨  ६ Force,  
뢠 祭 "567374-Joseph.A.D.G.".  室  Word
⠭ ਡ ᢮ :

 VB_Description = "Macro created 03/12/98 by Membership & Registry Division"
 VB_ProcData.VB_Invoke_Func = "Normal.Jedi_Magic.AutoExit"

============================================================================
 Macro.Word97.Leonor (03-09-98)
 
Cন ⢥  "AutoOpen".   ⨨
㬥⮢.  쭨  㡡⠬  ᨬ  稪 砩
ᥫ ᮧ  ⮫ C:\WINDOWS\ESCRITORIO\  䠩   "1" -
"100"  ப:

 I love Leonor forever

Cন ਩:

 Leonor macro (v1.1) made by uhjov

============================================================================
 Macro.Word97.Metamorp (03-09-98)
 
C⥫-.  㬥 ᮤন 5 ᮢ  㫥 "Metamorph":
AutoOpen, FileTemplatesTemp, ToolsMacroTemp, ViewVBCodeTemp, AutoExecTemp.
 NORMAL.DOT ᮤন   砩 ᣥ஢ ,  㫥
 6 ᮢ: FileSaveAs, AutoOpenTemp, FileTemplates,
ToolsMacro, ViewVBCode, AutoExec.   ࠭  䠩 METAMORPH.INI
 ࠧ [Infected]  ப Reponse.

  ⥬  ⨨ ࠦ 㬥, 㬥
ࠦ   ࠭  㣨 .   ࠧ祭 
㬥  NORMAL.DOT -  ࠦ ⥬  ⠢  ᢮ 
⥫ ப   ᮤন  . 
 ᮧ  NORMAL.DOT ⥫  ࠦ FileSaveAs 
⥫- ToolsMacro  ViewVBCode.  ࠦ 㬥⮢ 
᢮ ࢮ砫   䠩 C:\METAPH.LOG,  ࠭ ᮧ
ᮬ  ࠦ ⥬.

 ᪥ Word  㭪  "File", "Edit", "View", "Format" 
࠭ .  ᨬ    ६ 뤠
MessageBox-:

 Virus Metamorph
 Attention, j'ai contamin votre ordinateur...

 Virus metamorph
 Il est
 L'heure de metamorph

 Virus Metamorph
 Au revoir...

 Virus Metamorph
 Poufffff!!!!!!

 뤠 ᫥ MessageBox- ࠥ 䠩:

 C:\Windows\System\*.*
 C:\Windows\Command\*.*
 C:\Windows\*.Com
 C:\Dos\*.*

============================================================================
 Macro.Word97.Novosib (03-09-98)
 
筮 ਬ⨢ -, ᮤন 4 :

 㬥      NORMAL.DOT

 AutoOpen       AutoOp
 Fantom         Fantom
 Fuck           FileOpen
 AutoClose      AutoClose

ࠦ ⥬  ᮢ  㬥  ⨨ 䠩.
Cন  ᥡ ப :

 ᢥ頥  
  ᮯ⥫  Hᨡ᪠

뢮 MessageBox-,  ⥪  ᯮ ଠ⨢ ᨪ.
 ࠦ NORMAL.DOT 뤠 MessageBox:

 ந諠 ᪠ 訡.१ ਫ.

============================================================================
 Macro.Word97.Oetzi (03-09-98)
 
 , ᮤন ᥬ ᮢ  㭪権   㫥
"Modul1":  AutoOpen, AutoClose, FileSaveAs, FileSave, ToolsCustomize,
Mutate, Retro, Payload.

 ந室  ࠡ뢠   ᮢ: AutoOpen,
AutoClose, FileSaveAs, FileSave.  堭   
⥬ ⠢ ப   "Rem ".

뤠 Balloon:

 Wichtig! Lesen sie folgendes genau durch:
 He Bedienung! 5 Bier! Auch einen fr diesen Schnapsgsicht da.... Danke!

⥬ 뤠 MessageBox:

 W97M.Oetzi.A
 Hallo, mein name ist tzi. Ihr knnt mich mal besuchen kommen. Fr 8-9
 Cuba Libre la ich euch vielleicht gratis rein. UEO!!!
 NEGSTE BUDE = 500m !!!!!!

 䠩, ਭ騥 ⨢ᠬ:

 C:\PC-Cillin 95\Scan32.dll
 c:\pc-cil~1\*.dll
 C:\PC-Cillin 95\Lpt$vpn.*
 C:\PC-Cillin 97\Scan32.dll
 C:\PC-Cillin 97\Lpt$vpn.*
 C:\Tsc\PC-Cillin 97\Scan32.dll
 c:\tsc\pc-cil~1\*.dll
 C:\Tsc\PC-Cillin 97\Lpt$vpn.*
 C:\TBAVW95\Tbscan.sig
 c:\Tbavw95\Tb*.*
 C:\Tbavw95\Tbavw95.vxd

============================================================================
 Macro.Word97.Tanggal (03-09-98)
 
Cন 2 :

 㬥      NORMAL.DOT

 AutoOpen       Jua
 Joea           FileSaveAs

ࠦ ⥬  ᮢ  ⨨ ࠦ 䠩
(AutoOpen), ࠦ 㬥⮢ ந室   ࠭  㣨
 (FileSaveAs).

 1- ᫠ 뤠 MessageBox:

 Tanggal satu, baru gajian nih ye, cerah sekali deh senyumnya.

============================================================================
 Macro.Word97.Thisdoc (03-09-98)
 
Cন  ᮢ   㫥 "ThisDocument": AutoExec, AutoOpen,
FileSaveAs, FileTemplates, ToolsMacro, ViewVBCode. ࠦ 
 ᮢ  ⨨ 㬥⮢,  ⮬ ᯮ ᢮  
䠩 C:\THISDOC.LOG  뤠 MessageBox:

 Virus ThisDoc
 Attention, ThisDocument est infect...

ࠦ 㬥⮢ ந室   ࠭  㣨 , 
 ⮬ 뤠 MessageBox:

 Virus ThisDoc
 Je suis une Nouvelle Gnration de Virus de Macro...

 㧪 Word  15- ᫠  뤠 MessageBox:

 Virus ThisDoc
 ZeMacroKiller98 est heureux de vous prsenter sa nouvelle cration...

 㧪 Word  ᮢ    ᪠ 뤠 MessageBox:

 Virus ThisDoc
 Vos donnes vont tre dtruites...

 㤠 䠩:

 C:\Windows\*.INI
 C:\Windows\*.COM

 맮 Tools/Macro 뤠 MessageBox:

 Microsoft Word
 Erreur Systme
 Veuillez ressayer plus tard

 맮  ViewVBCode 뤠 MessageBox:

 Microsoft Word
 Ce programme a ralis une opration illgale et va tre interrompu.

============================================================================
 Macro.Word97.Unhelp (03-09-98)
 
Cন     㫥 "Helper": AutoOpen, ViewVBCode,
FileTemplates, ToolsMacro (⥫).   ⨨ 㬥⮢.
ࠦ ⢫    ᯮ/ १ 䠩
C:\STARTUP.LOG. H  .

============================================================================
 Macro.Word97.Wnw (03-09-98)
 
Cন ᥬ ᮢ  㭪権   㫥 "WNW": AutoExec, AutoOpen,
FileSaveAs, WNWP, FileTemplates, ToolsMacro, ViewVBCode. ࠦ
쭮  ᮢ ந室  ⨨ ஢
㬥. ࠦ 㬥⮢ ந室   ⨨  ࠭ 
㣨 .

 ᪥ Word  㡡   ᥭ  뤠 ᮮ⢥騥
।०騥 ᮮ饭:

    On est Samedi, aujourd'hui
    Je ne travaillerai pas...

    On est Dimanche, aujourd'hui
    Je ne travaillerai pas...

 ᨬ  ⢠ ⠪ ᮮ饭  믮 ࠧ
⨢ ⢨ (. ). C稪 ⢠ ।०
࠭  WINWORD8.INI  ࠧ [WNW]  㭪 Total.

᫥ 10 ।०  뤠 MessageBox:

 Virus WNW
 Vous jouez avec le feu...

 㤠 䠩 C:\WINDOWS\BUREAU\*.LNK  C:\WINDOWS\MENU DMARRER\*.*

᫥ 20 ।० 뤠 MessageBox:

 Virus WNW
 Je vous avais prvenu...

 㤠 䠩:

 C:\Windows\*.ini
 C:\Autoexec.bat
 C:\Config.sys
 C:\Msdos.sys
 C:\Io.sys

᫥ 30 뤠 MessageBox:

 Virus WNW
 Vous l'aurez voulu!!!!

 ଠ  C:

    ᨬ  砩 ᫠  ⠪  뤠
MessageBox:

 Virus WNW
 Au revoir...

 ப稢 ப    Word:

 Je ne veux pas travailler ce weekend, donc, je vais vous en empcher...

============================================================================
 Macro.Word97.Xute (03-09-98)
 
Cন  㫥 "Xute" ⢥  AutoClose. C⢥⢥,
ࠧ  ⨨ 䠩.  ந室 ⥬
ᯮ/   १ 䠩 C:\XUTE.DAT. 26 ,  ᫨
㬬    ࠢ 30,  㤠 䠩  ⥪饬 ᪥ 
"DELTREE /Y \*.*".

 ⥪⮢ ப ( 䠩 ᯮ,  DELTREE  .) ࠭ 
஢ .  ᯮ짮  ப ᪨ ஢뢠
.

============================================================================
 Mandra, ᥬ⢮ (16-10-98)
 
H १ . 墠뢠 INT 21h  뢠  
᪠ COM-䠩.  ᨬ  ⥬ ⠩ 뢮
ᮮ饭:

 "Mandra.533":      Mandragore for president !!!
 "Mandra.562":      Mandragore'z sPirIt haunts ur computah !
 "Mandra.664,669":  BEER and TEQUILA forever !'

 ᮤঠ ப:

 "Mandra.533":      Mandragore [Mdrg v3.7]
 "Mandra.562":      Mandragore [Mdrg v4]
 "Mandra.664,669":  Mandragore [Mdrg v5]
                    Error 8869: processor drunk 8*)
                    Eddy iz still alive somwhere in time ......

============================================================================
 Mandra.886 (17-12-98)
 
 ஢ , 뢠   EXE-䠩  
᪥  ⨨. ᯮ 㬥஢ 㭪樨 DOS, 祬
뢠  ࠢ쭮.  १      ﭨ
ࠧ 䠩,   ,  ४⭮ ࠦ ந室 ⮫쪮
 筮 ࠭祭 ᫮.

 뢠 -䥪: 뢮 ࠦ 饩 ஢. Cন
ப:

 [MAD COW]
 Mandragore

============================================================================
 MegaDevil.665 (03-09-98)
 
 १ . 墠뢠 INT 9, 21h  뢠  
COM-䠩   ᪥. 뢠 ᥡ    䨪஢
 9000:0000    . 23- ५ ஢뢠 
뢮 ⥪:

 Key Killer, (c) 1995 by Mega Devil in AZORES!!! - Portugal.

============================================================================
 Messev.3158 (03-09-98)
 
祭  १ . ࠦ DOS COM-  EXE-䠩, 뢠
᢮ 㧮   boot-ᥪ ᪥  MBR . 
஢   䠩, ⠪   㧮 ᥪ.  饭 
ࠦ 䠩  ᥪࠬ 뢠 ⥫-楤.

 ᪥ ࠦ 䠩    墠뢠 INT 13h,21h
 ⥬ 뢠   COM-  EXE-䠩   ᪥, ⨨,
⥭/ ਡ⮢   㤠 䠩. । ⥬,  
ࠢ ணࠬ-⥫  ࠦ MBR   
 DOS, 㪠 樥 "COMSPEC=".    ⫠
ࠦ 䠩   .  饭  ࠦ 䠩 ⠪
"㬥蠥"  .  ᪥ ணࠬ PKZIP, ARJ, LHA, RAR  CHKDSK
 몫砥 ᢮ ⥫-楤.

 ᪥ TBSCAN    ப 樨 ⬥ ᪠஢
  ᪮ .  ⫠稪 ࠥ ᥪ .
 ࠦ MBR 㭨⮦ 䠩 C:\WINDOWS\SYSTEM\IOSUBSYS\HDFLOP.PDR.

㧮筠   뢠 ⮫쪮  MBR  boot-ᥪ 
ᯮᮡ ࠦ 䠩. 2   ࠥ ଠ   
뢮  ࠭  ਭ ⥪:

 Gwar virus v1.3, (c) 1998 by T-2000 / Invaders SKLSUX!Winsuck95

 ⠪ ᮤন ப:

 =[ Messev v2.10, (c) 1998 by T-2000 / Invaders ]=
 MeSSeV LiVeS!
 Daddy-K-tit 2 Gallyon van Vessem
 This is a pretty lame virus, I only released it coz
 I wanted to infect some ppl.Messev - Screwed version
 If I don't pass... fuck it! My gun will be your angel of mercy!
 [ DEMANUFACTURE - FEAR FACTORY ]

============================================================================
 Ministry.474 (17-12-98)
 
 १ ஢ .   ࠦ .COM-䠩 
⠫ PATH,  ࠦ 뢠   䠩. Cন ப:

 ~MINISTRY~ by Alex Cool.Norilsk.95Jun23.You muthafuckas.

============================================================================
 Nop.355 (16-10-98)
 
 १ 筮 ⮩ .  .COM-䠩 
뢠   砫. H  .  ࠦ ᯮ
६ 䠩   NOP.

============================================================================
 Nucleii, ᥬ⢮ (16-10-98)
 

 Nucleii.200
 
祭  १ .  ᪥   䠩  ⠫
⥪饣 ᪠  뢠   砫  ࠭ ண ᮤন
䠩. ᫥ ࠦ 4- 䠩 ⠥  4  ᥪ 
᪥ B:. Cন ப:

 nUcLeii~.E=mc2


 Nucleii.1388
 
H १ ஢ .  .COM-䠩  뢠
  .  30- ᫠ 뢮 ᮮ饭:

  F-PROT anti-anti-virus programͻ
  Version 1.0                               nUcLeii Software International 
 ͼ


        Scan            ͻ
                         Too bad your now infected with the frisk 
                         virus. Sorry.,.hehe., but thats the way  
        Options          shit works. If you weren't stealing soft 
                         ware, or trying to get p0rn or something,
                         then this might not of happened.         
        Infomation       Don't buy products that harass their user
                         Stay away from things like McAfee, Norton
                         Invircible, err well,.hehe., seems like  
        Quit             everyone is selling out these days.,,.   
                                                                  
                         Greetings to fridrik and frisk software. 
                        ͼ
 ͻ
 Information about antivirus scanners, and how most are just crap not worth
 wasting your money on. Hope this is "nit-witty" enough for ya fridrik!!!  
 ͼ


Cন ⠪ ப-ࠩ:

 ** frisk by nUcLeii 9/09/98

============================================================================
 Nutmeg.4096 (03-09-98)
 
 १ 䠩-㧮 . 뢠  砫
EXE-䠩   MBR . Hᠭ  Pascal-: ᭮  
ᮤন Pascal-楤  ⮫쪮 让 ⮪ 㧪  MBR 
᫥饩 ⠫樨   DOS- ᠭ  ᥬ. 
 㯠 LzExe,  १ 10Kb Pascal-ணࠬ 頥  4Kb
ॠ쭮 ࠧ .

 ᪥ ࠦ 䠩  뢠 ᢮ 稪  MBR
  ᭮ ᢮   ᫥騥 ᥪ ᪠. ⥬ 
६   믮 ࠦ 䠩-⥫, 墠뢠 INT 28h
(DOS Idle)  ⠥ १⭮  DOS-.  맮 INT 28h 
।  ⨢    ணࠬ  ࠦ .

 㧪  ࠦ MBR  墠뢠 INT 1Ch,  㧪
DOS, 墠뢠 INT 21h   ᪥ ࢮ 䠩 ᮧ  ᪥
᢮ "ய" - 4Kb 䠩  砩 ࠭ . ⥬ 
뢠   䠩 AUTOEXEC.BAT  ᪠ ⮣ 䠩. 
᪥ "ய"  ந   ⢨,    ᪥
ࠦ 䠩 (墠뢠 INT 28h  ..)  ᪫祭 ⮣, 
⠪ 㭨⮦ 䠩-ய  㤠 뫪    䠩
AUTOEXEC.BAT.

 ᮤন ப:

 AUTOEXEC.BAT
 [NUTMEG2] by Vecna/29A
 This virus was written in Brasil, in 1998
 QUEREMOS ROMARIO DE VOLTA NA SELECAO, ZAGALLO BURRO

============================================================================
 NWO.833 (30-09-98)
 
祭  १ . 墠뢠 INT 21h  뢠 
 COM-  EXE-䠩   ᪥.  ⨢: SC*.*, TB*.*,
AV*.*, VI*.* (SCAN, TBAV, AVP, VIRUSCAN). 12  ࠥ  
. 3  뢮 ᮮ饭:

 Long Live the New World Order!

============================================================================
 PFS.3786 (07-11-98)
 
H १ 䠩-㧮 ஢ ⥫-.
ࠦ MBR   뢠   COM-  EXE-䠩. 
᪥ ࠦ 䠩  뢠  MBR, 墠뢠 INT 21h 
⠥ १⭮  ⥬ .  㧪  ࠦ ᪠
墠뢠 INT 8 (⠩),  㧪 DOS  ⥬ 墠뢠 INT
21h.

墠稪 INT 21h ࠡ뢠  ⪠ DOS-㭪権: FindFirst/Next
(    ), ⨥ 䠩, ⨥, ,
२, ⥭  ..  ࠦ 䠩   ⨨,
᪥, २  ⥭/ ਡ⮢.  맮 ⠫
DOS-㭪権  । ࠢ  ᢮ ⥫-ணࠬ.

 ⥫-㭪権  ᯮ  筮 ᫮ ⮤ 
 ᢮ ⢨  ⥬.  ࠦ MBR  뢠
楤 אַ ⥭/ ᥪ஢ १  ஫  室
⠪ ࠧ ஥  BIOS ⨢ .  ࠦ 
    ᥣ 339  ᢮  (ࠡ稪 INT 21h). 
室  뢠 ᢮ ᭮   ࢮ ४
, 㤠 뢠   ࠦ MBR.  १  
 筮 DOS-     ᯨ᪥ १ ணࠬ
 ᬮ  .  ᨬ  ⥬ 䨣樨 
⠪  ᢮ ᭮   XMS-   室
ᯮ    , ᯮ  ᥪ .

 ᮤন ப:

 PowerFul Stealth v6.1 (c)'98 DK eyegabooom

============================================================================
 Priv.1931 (03-09-98)
 
 १ ஢ . 㦥 "  "  ᨨ
  1998. 墠뢠 INT 1Ch (⠩), INT 21h  뢠  
᪠ COM-  EXE-䠩,  ⮬ ஢  䠩  
ࠦ COMMAND.COM  AIDSTEST.EXE (  砫-। 90-x
ᨩ᪨ ⨢). H稭  5-   ᨬ  ᢮ 稪
 뢮 ⥪:

 ਢ !!!
 ᫨   襩 窨 ,
      ଠ
   ᥤ ࠡ  ஦  ᠬ ! Press any key to
continue...

᫥ ⮣  横᪨ ⠥ ᥪ   訢
 (      ਢ   
, ..   ).

 ⠪ 稭  5-   ᨬ  ᢮ 稪
ந뢠  ( ᪮).

============================================================================
 Rasputin (03-09-98)
 
H १ 㧮 ⥫-. ஢   ᥪ,
⠪   ⥬ . 墠뢠 INT 13h  뢠  MBR
  boot-ᥪ ᪥. C த  ࢮ砫
㧮 ᥪ ࠧ頥  ᢮ ᥪ ᪠  砥  
ᡮ.

 㧪  ࠦ ᪠  4    뢠 -䥪,
஢뢠  뢮 ⥪:

 RASPUTIN
 Coded By
 Blue Skull

============================================================================
 Res.2879 (01-12-98)
 
 १ 䠩-㧮 ⥫-. 墠뢠 INT
13h, 21h. 뢠   COM-  EXE-䠩  饭  ,
ࠦ MBR   㧮 ᥪ 1.4Mb ᪥. ஢ 
䠩   ࠦ  ⨢  娢.  䠩
஢  ப "NFEBSTTERJIPHAAR" (  ᨬ  䠩, ஢
᫥    䠩). Cন ⠪ ப:

 [RES] VVS

============================================================================
 Script.Inf (17-12-98)
 
Cਯ-, ࠦ騩 ⠫樮 INF-䠩 Windows. INF-䠩
ᮤঠ  ᥡ 業ਨ  ⠭    饣
ணࠬ ᯥ祭  ⨢  맮 ⪠ "⠭"
("Install")  ⥪᭮  "஢" ("Explorer").  ᢮
ࠧ  ᯮ 樨 ᯥ樠஢ ਯ-몠,
ᯮ㥬  INF-䠩.

 ⠫樨 ணࠬ ᯥ祭 ⠭ ᯮᮡ Windows 
INF-䠩, ࠡ뢠   믮 ਯ-樨.  ਯ
 ⨢樨 ᮧ  ୥ ⠫ ᪠ C 䠩   VXER.TXT,
   䠩-⥫ (ࠦ INF-䠩)  뢠  
䠩 AUTOEXEC.BAT ᪮쪮  DOS.    ।
१㧪 Windows   ⠫ Windows\Inf ⥪饣 ᪠ 
*.INF-䠩  뢠  ,  ࠦ ᯮ 
, ᠭ  䠩 VXER.TXT.

============================================================================
 Sniper (30-09-98)
 
 १ 㧮 . 墠뢠 INT 13h  ࠦ MBR
  boot-ᥪ ᪥.  ᥭ  㧪  ࠦ
᪠  CMOS  뢮 ⥪:

 MR.SNIPER -

============================================================================
 Sushy.1706 (03-09-98)
 
 १ ஢ ⥫-. 墠뢠 INT 21h 
뢠   COM-  EXE-䠩  饭  .  ⨨
ࠦ 䠩  ६   (ࠦ  ⨨).

    室 ⠪  ஢  
஢뢥  ࠧ  맮 INT 21h.  稭 訡 
"訢"  ᫥ 1-  2- ࠦ.

Cন ப:

 SushyBlue Skull^SLAML.ong L.ife S.ushy !!!

============================================================================
 TD.1536 (16-10-98)
 
H १ 䠩-㧮 . 뢠   COM-
 EXE-䠩   ᪥, ࠦ MBR    ࠦ
䠩  㧮 ᥪ ᪥  饭  .   
; ࠦ 䠩/᪨ ।   䨪
"TD".

 ᪥  ࠦ 䠩  墠뢠 INT 21h,  㧪
 ࠦ ᪠  ⠪ 墠뢠 INT 13h, 1Ch.  ࠦ
䠩  ࠡ뢠  ࠢ 䨪 ENUNS ᠬ஢ન
COM-䠩  Windows32.  ⠫樨    ⠪ ࠦ 䠩
C:\WINDOWS\WIN.COM  㤠 䠩 C:\WINDOWS\SYSTEM\IOSUBSYS\HSFLOP.PDR.

============================================================================
 Trenton (03-09-98)
 
H १ 㧮 . 墠뢠 INT 13h 
뢠  MBR   boot- ᪥. "" ᢮
墠稪 INT 13h:  ⠫樨   ᪠ BIOS  
    CDh 18h (맮 뢠 INT 18h), ⥬ ⠭
㤠 INT 13h  墠뢠 INT 18h.

10 ᥭ  22 䥢ࠫ ஢뢠  뢮 ⥪:

              -= Trenton A. Breazeale =-
  -= So on I worked and waited for my light.        =-
  -= Not knowing, I settled into my bed;            =-
  -= That Trenton Breazeale, one calm winter night, =-
  -= Went home and put a bullet through his head.   =-
      -= September 10, 1980 - February 22, 1998 =-
 -= R.I.P. Good Buddy.  You will never be forgotten. =-

           Please Help Somebody Today.
             Tomorrow may be too late.
        Tomorrow was too late to help Trent...


 ⠪ ᮤন ப:

 (C) '98 CyberDarkness & CyberYoda [SLAM]

============================================================================
 Triadi.3998 (30-09-98)
 
 १ . 墠뢠 INT 21h  뢠  
COM-  EXE-䠩   ᪥.   ᮬ: 
⠫,  砥 ࠢ  ᪥ ࠦ
COM-䠩, ᮤন , ⨬ ⮫쪮   PC-XT. 
⮩ 稭 ࠦ COM-䠩 訢    ᪥ 
ࠧ  ⮫쪮  EXE-䠩. Hᬮ    
㦥 ⮫쪮  1998  - ਬ୮ १ 7  ᫥  ᠭ.

 ⮬ ࠦ   -䥪⮬: ४砥
  ᪨ ०, 뢮 饭 5" 䫮-᪠ 
ப:

 Declaration Of Disk Rights
 We need REST!!!
 DISKTIRED
 (c) 1991, TRIADI

 ᨬ  ⥪饣 ६ ( 12:00   19:00)  뢮
ᮮ饭    ப "TRD":

 It's lunch time,
 Everybody goes to eat.
 Only if you can guess my initial,
 I'll let you pass.

 It's dinner time,
 I want to eat.
 I'll let you use the file,
 if you can guess my initial.

============================================================================
 WhatsAll.562 (03-09-98)
 
 १ .  .COM-䠩  뢠   ,
ਧ ࠦ 㦨 ᫥   - '$'.  ᨬ 
᢮ 稪 ࠦ 믠 㪢  ࠭, ⥬ 뢠 INT 19h
(१㧪 ). Cন ப:

   

============================================================================
 WhiteShark.527 (03-09-98)
 
 १ ஢ . 墠뢠 INT 21h 
뢠   EXE-䠩   ᪥. Cন ப:

 White Shark
 Jocked Virus

============================================================================
 Win32.Antigen trojan (01-12-98)
 
᪠ ணࠬ.  ᪥   ⥬   ஫ 㯠 
୥, ⥫䮭 ,  ..  室 ஢뢠  
뫠  ୥. ﭥ  ࠧ᫠  ᪮쪮 ७権  
⨢᭮ ணࠬ.  뫪 ଠ樨  ࠦ 
ᯮ :

 jcrowl@usa.net
 uragan@msn.com
 anarch666@iname.com

============================================================================
 Win32.BO, aka Back Orifice Trojan (03-09-98)
 
᪨  BO (Back Orifice)  ᢮   筮 魮
⨫⮩ 㤠 ஢ ஢  .  "Back Orifice
 ⥬ 㤠 ஢, 饩 짮⥫
஫஢    筮 ᮫  ᪮
窨.  쭮   १ Internet, BO ।⠢
짮⥫  ⥩  㤠 Windows-, 祬 
ᠬ 짮⥫ ⮣ " - ᪠  ४  
  堪᪨ Web-࠭.

⢥ ᮡ ⮩ ணࠬ ⠢ ஢  
।  ணࠬ: ⢨ ।०  ⠫樨 
᪥.  ᪥ ﭥ ⠭ ᥡ  ⥬  ⥬ ᫥ 
,  ⮬ 짮⥫  뤠  ᮮ饭  ⢨
  ⥬.  ⮣, 뫪     ᯨ᪥
⨢ ਫ.  १ "짮⥫" ⮩ ᪮ ணࠬ
      ⢨  ⥬,   ६   
  㤠 ࠢ.

ﭥ ࠭    ᪮쪨 ணࠬ  㬥樨.
 ணࠬ ᠭ  C++  ஢ Microsoft Visual C++.  
ணࠬ  ଠ Portable Executable   믮 ⮫쪮 
। Win32.

᭮ ணࠬ    BOSERVE.EXE (⥬  䠩 
 㦥  ࠧ묨 ) -  ᭮ "ࢥୠ"
 ,   맮  㤠 "⮢".

 䠩  BOCONFIG.EXE, 䨣 "ࢥ"  
"ਪ९" BOSERVE.EXE  - 㣨 䠩 (  
).  ᪥ ⠪ ਫ  "뢠"   ࠦ
䠩  ᪠  믮  -  䥪⮢.

  ⠪   "᪨" ⨫ (᮫  ᪨
䥩),   "" ࠢ 㤠 "ࢥ஬".  
ணࠬ  ⨫⠬ ᨨ/ᨨ 䠩 - 
ᯮ  ஢ 䠩 / 㤠 "ࢥ".


 ᪥ ﭥ 樠 ᮪ Windows, ᮧ 䠩 WINDLL.DLL
 ⥬ ⠫ Windows, ।  ᪮쪨 Windiows API,
 ᢮     㦠   , ᫨ ⠪ 㦥
(..  ᢮ ). ⥬ ﭥ  ᥡ  ⥬
⠫ Windows  ॣ   ॥  -᪠ :

 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

⥬ ﭥ 墠뢠   ᮪⮢ Windows ( 㬮砭 - ᮪
31337)  ⠥   Windows  ⮥ ਫ (.. 
⨢   뫪  ᯨ᪥ ਫ). ᭮ 楤 墠
ᮮ饭 ⥬    㤠 .  
।  ஢ .  ᨬ   ﭥ 믮
᫥騥 ⢨:

 - 뫠  , 짮⥫  ଠ  ⥬: ⨯
   , ࠧ ,  ⥬, ⠭ ன⢠  ..
 - ࠧ 㤠   ᪠ (sahre)
 - ᪠ 䠩  ᪠
 - ᫠/ਭ 䠩, ⠪  㭨⮦, ᪮஢, २,
   믮  䠩
 - ᮧ/㭨⮦ ⠫
 - 㯠/ᯠ 䠩
 - ⪫砥 ⥪饣 짮⥫  
 - 訢 
 - 뫠 ᯨ᮪ ⨢ ᮢ
 - 㦠 㪠 
 - 砥  ⥢ ᠬ
 - gets and sends cashed passwords (p/words that were used during current
   seance), then looks for ScreenSaver password (decrypts and sends them)
 - 뢮 MessageBox
 - ⠥/ ⥬ ॥
 - 뢠/७ࠢ 㣨 ᮪ TCP/IP
 - ন ⮪ HTTP  㫨 Web-ࢥ (.. 楬 
   ࠢ   㧥)
 - ந뢠 㪮 䠩
 - 墠뢠,   ⥬ 뫠 ப,   
     ᮥ   
  ..

ﭥ ⠪   ᯨ᮪ ᢮ 㭪権  
砥 ᮢ (plug-in).    ।  "ࢥ" 
⠫஢ ⠬      쭥襬  믮
ࠪ᪨  ⢨  ࠦ .

============================================================================
 Win32.DeepThroat trojan (17-12-98)
 
ﭥ DeepThroat  ⨫⮩ ⮣ ஢ ஢
   㤠 ନ. C. "Win32.BO".

============================================================================
 Win32.Executor, Netbus, Phase (30-09-98)
 
 ⨫⠬ ⮣ ஢ ஢   
㤠 ନ.  ᬠਢ ᮤন ᪮ ࠦ
, ஢ (஢) 䠩, 㭨⮦ ଠ  .. C.
"Win32.BO".

============================================================================
 Win32.IKX.1009 (03-09-98)
 
 १ , ࠧ  Windows 95/98/NT. 
᪥   ⥪饬 ⠫ EXE-䠩 Windows (Portable Executable) 
뢠   ।: "ࠧ" ᮤন 䠩   ᢮
  ᢮襥 . Cন ப:

 Murkry\IKX

 ᪥ ࠦ ணࠬ  ᪠  Windows   
楤 GetProcAddress.   祭   ⥬
।   9 楤, 室   ᪠  ࠦ
䠩:

 CreateFileA, CreateFileMappingA, MapViewOfFile, CloseHandle,
 FindFirstFileA, FindNextFileA, FindClose, UnmapViewOfFile, SetEndOfFile

⥬   䠩  ࠦ .  ࠦ  뢠 ᢮
   ࢮ ᥪ樨 䠩, ।⥫쭮 ᤢ  
᫥騥 ᥪ樨.  ⮬  ஢,   㠫묨
ᠬ ࢮ  ன ᥪ樨 筮   ࠧ饭 
.  室  ⮣, ⮡  ࠦ ࢮ ᥪ樨 
४ / ன ᥪ樨  㧪 䠩  ⨢ .
⥬    窨 室  ࠢ 室 ࠧ
 ᥪ権.

 ᮤন 訡  ࠦ 䠩 ୮, , ,  
᪠뢠   ࠡᯮᮡ.

============================================================================
 Win32.Libertine (03-09-98)
 
-ଥ  , ࠦ 믮塞 䠩 DOS 
Windows32. Cন  ᥡ ⥪:

 [Win32.Libertine v1.07b]
 Copyright 1998-xxxx by <NeverLoved>

C  ⨯ ࠦ ᮬ 䠩:

 - ࠦ Win32 PE-䠩
 - ࠦ DOS COM-䠩
 - "ய", Win32 PE-䠩 (31672  "⮣"  )

 稭 訡    ﭨ ࠧ  Windows NT - 
ࠦ 䠩 ਢ  ⠭⭮ ᮮ饭  訡. 
ய  ࠧ  NT  ஡.

 ࠦ 䠩 (COM  PE)  뢠 ᢮  (32K)  
䠩    䠩 ⠪ ࠧ,   ᪥
ࠢ 砥  .  窨 室 ࠧ祭   
ਠ⮢ ࠦ 䠩.  ᪥ ࠦ COM-  PE-䠩
ࠢ । 楤ࠬ,   ய  (䠩
C:\MYLENE.EXE), 믮    ࠢ ணࠬ-⥫.
᫨ ய  㦥,   ᭠砫 ᮧ  ⥬ ᪠.

 楤 ⨢樨 ய  筮 ⪨: ᥣ 
200   DOS COM-䠩.  Win32-䠩  楤 ᪮쪮 ᫮ 
ꥬ,  믮 ਬ୮   ⢨,    砥
COM-䠩.  ᭮ 楤 ࠧ,   .
室  ய ,  ⨢    ᪥.


  ய
 ---------------
   믮 ᪨騥 ⢨: ⬥ ᮮ饭 
⥬ 訡  ⠭  ᢮  㬥஢
⥬ 䫠 NukeProcess  ServiceProcess.  १: a) 
  ᯨ᪥ ⨢ ਫ; b)   蠥 
logoff-.

 ⠪ 믮 -⨢ ⢨.  ⢥ "ꥪ
" 㯠 ⢥ ⨢ - AVP Inspector (AVPI). 
 ᭮ 䠩, 뢠  ᮤন, ᪠   
뢠    NOP.  १ AVPI  ᪥  
⥪   ⥬,  ࠧ 稢 ᪠஢
᪮  뢮   १⠬.

 । ⮭宦 AVPI   ⥬ ॥: 
뢠 HKEY_USERS\Default\Software\KasperskyLab\AVPI, 뢠
६ Path, 뢠  ⮬ ⠫ AVPICHCK.DLL, ᪠  ࠢ
.  ⠪   AVPI , ᫨  ⨢, 㦠  
.

᫥ "⨢樨" AVPI   ᨬ  ⥬ ⠩ 
 Windows - 뢠   ⮣ࠨ ࠭᪮  Mylene
Farmer,    BMP-ଠ  ॣ  ⥬ ॥.

⥬ ࠢ ५ 楤 ࠦ,   COM- 
PE-䠩   ⪨ ᪠, 稭  C:,  ࠦ  8-
㦥 䠩. ᫨ । ᪨    ᪮ 
쭮  (..  CD-ROM, 㤠   ..),  蠥
᢮ ࠡ.

 ࠦ Win32 EXE PE-䠩  ᮧ   䠩  ᥪ
  "_Mylene_", 뢠   ᢮    ⮢
 ணࠬ.    PE-䠩 ஢ 䨪-஬.

 ࠦ COM-䠩  ⠪ 뢠   .  ⮬ 
⠪  ७ ଠ 䠩 - ᫥ ࠦ  
EXE-ଠ.    ࠦ COM-䠩  , ᪮
COM-䠩    ࠧ  64K.

============================================================================
 Win32.Shaitan (05-09-98)
 
 १ Windows32-.  PE EXE-䠩 (Portable
Executable)  ⥪饬 ⠫,  ⠫ ᪮ C:  D: 
뢠   .    ࠦ    䠩. 
ࠦ 㢥稢 ࠧ ᫥ ᥪ樨, 뢠    
 PE- 䠩  ⮢  ணࠬ.

 ᮤন  訡   設⢥ 砥 Windows 뢮
⠭⭮ ᮮ饭  訡  蠥 ࠡ ࠦ 䠩.

 饭  Windows32-㭪  ᪠  Windows, ।
 㭪樨 GetProcAddress     ⥬ ।  㣨
室 㭪権:

 GetProcAddress GetModuleHandleA CreateFileA CreateFileMappingA
 MapViewOfFile CloseHandle FindFirstFileA FindNextFileA FindClose
 SetFilePointer SetEndOfFile GetCurrentDirectoryA SetCurrentDirectoryA
 GetWindowsDirectoryA GetCommandLineA UnmapViewOfFile GetFileAttributesA
 SetFileAttributesA GetDriveTypeA

ਬ塞   ⮤ ᪠  ᮢ ࠡ⠥   Windows95,
⠪   WindowsNT.

 ⠪ ᮤন ஢ ப:

 Win32.Shaitan (c) 1998 The Shaitan [SLAM]
 This virus was written in the city of Mumbai

============================================================================
 Win32.Voodoo.1537 (31-10-98)
 
 १ ஢ Win32-, ࠦ PE EXE-䠩.
⠫ ᥡ   Windows   ᨬ  ⥬ ᮡ⨩
 䠩  "C:\Program Files"  㣨 ⠫ ᪠  ࠦ . 
ࠦ 뢠 ᢮    ᫥ ᥪ樨 䠩,
।⥫쭮 㢥稢  ࠧ,   ⮢  
PE-. H  , ᮤন ப-"ࠩ":

 Star0 - Magic Voodoo

 ᪥ ࠦ 䠩  ஢뢠 ᢮ , ᪠ 
Windows    室 㭪権 (GetSystemTime, CreateThread,
FindFirstFileA, FindNextFileA  稥). ⥬  뤥 ᥡ 
 Windows,  㤠 ᢮   墠뢠 㭪 ExitProcess.
 ⮣   ᪠  Windows   .

 ᯮ 筮 Windows:  ࠡ稪 ExitProcess
砥 ࠢ ।⢥   Windows,   ६ 
楤 ᪠  ࠦ 䠩 ࠡ⠥  ࠫ쭮 ⪥ (thread).

============================================================================
 Win95.Bonk, ᥬ⢮ (16-10-98)
 
 १ , ࠭  Window95/98. ⠫
ᥡ   Windows  뢠  뢠 PE EXE-䠩.  稭
訡 ࠡᯮᮡ ⮫쪮  ᪮쪨 묨 ﬨ Windows 
訢 ⥬  ⨢ 砥. Cঠ ப:

 [BONK32] by Vecna/29A

뢠 ப-䨪 "BONK"  PE- (  ஫쭮
㬬 䠩)  ᯮ   ⥪஢ 㦥 ࠦ 䠩.

 ⠫樨     ࠦ 䠩 ᯮ ᪮쪮
筮 ᫮ ਥ.  ⮣, ⮡ ᪮஢   ᢮
  Ring0     VxD-㭪, ᯮ ⮤,
  "Win95.CIH". ⥬  墠뢠 IFS API  
⨨ EXE-䠩 뢠 楤 ࠦ.

 ࠦ 䠩  ࠧ묨 ᯮᮡ  ⮢
 䠩:   ᮮ⢥饥   PE-,  
ࢮ砫쭮 ⮢  뢠  । ࠢ
   (JMP_Virus). ன ᯮᮡ ᯮ ⮫쪮 ᫨ 
⮢ 楤  ⠪ 뢠 "ࠨ" .

 뢠 ᢮   䠩   ࠧ :  
(楤 樠樨 -  200 ) 뢠  PE- (.
⠪ "Win95.CIH"), ᭮   뢠   䠩. 
⮬ ᭮    ࠦ 䠩   "૥":
    PE-  ⮣, ⮡ "ਪ" ᢮
  㦠   ᥪ 䠩.  ⮣ 楤
樠樨 (ࢠ   ) 뢠 ࠦ 䠩,
뢠 㤠  "૥"  ।   ࠢ.

 ⠪   ࠦ 䠩 (,  ⮣, ⮡
᫮ 楤 祭).  ⮬   ࠭  ஢.
 ⮣   ࠦ 뢠 CRC 㥬 ,
   ᢮ ⥫,   ஢ ॡ  
, 뢠 CRC ஢   ࠢ  
ࢮ砫쭮.

============================================================================
 Win95.Evil (30-09-98)
 
 १ Windows95-.  PE EXE-䠩 (Portable
Executable)  뢠   .  ࠦ 㢥稢 ࠧ
᫥ ᥪ樨, 뢠   ᢮    
PE-  ⮢  ணࠬ.  ࠦ ᯮ
맮 DOS_Call,  ண 砥 ᪠஢ 㬥஢
⠡  Windows95.

 稭 쭮  訡  設⢮ 䠩  
ࠦ. Cন ப-䨪:

 EVIL

============================================================================
 Win95.Fono, aka Inca (01-12-98)
 
 १ 䠩-㧮 䨪-. ࠦ ꥪ
ࠧ ⨯,  ᭮ 楫   Windows95:  ᭮
  ⠥ १⭮  VxD-ࠩ Windows95, 墠뢠
饭  䠩   ⨨ PE-䠩 Windows 뢠  
.  ⠪ 墠뢠 楯 INT 13h  饭 ० 
ࠦ 㧮 ᥪ 1.4 ᪥.  ⠪ 뢠 ᢮
COM-ய  娢 ZIP, LHA, ARJ  RAR; ᮧ  ᪥ VxD-ய 
COM-; ᮧ mIRC-,   ண ⠥ ᫠
᢮ ய   IRC.

 ᯮ 䨪-ਥ  ७  ࠪ᪨  ⨯
ꥪ⮢:  ࠦ PE-䠩, boot-ᥪ஢   ᮧ
COM-ய஢.

 ᮤন ப-ࠩ:

 El Inca virus

C , ,  稫   ᢮ VxD-ய
FONO98.VXD (. ).

 ࠦ
 ---------
 ⠫樨  ⥬  Windows  VxD-ࠩ
墠뢠 맮 IFS (Installable File System) API  楯 V86 INT
13h.  १  墠뢠  䠩, ⠪  ᥪ
ᮡ.

IFS-墠稪  ࠡ뢠 ⮫쪮 맮  䠩.  ⮬
 ।  䠩   ᨬ   ⨯ 뢠 ࠧ
楤 ࠦ: 믮塞 䠩 PE EXE  SCR (ਭ-ᥩ) 
娢 LHA, LZH, PAK, ZIP, ARJ, RAR. ᮡ   㤥 䠩
MIRC32.EXE:  饭    뢠 ᢮ 楤 ࠧ
१  IRC.

 ࠦ PE-䠩  ஢  ७ ଠ, 
 䠩, ᮧ   䠩  ᥪ  砩  
뢠   ᢮ .

 ⨨ 䠩 MIRC32.EXE  ᮧ  ⥪饬 ⠫ ᪨
䠩 REVENGE.COM ( 䠩  ᪥  CMOS  訢
), 뢠 䠩 MIRC.INI  뢠    ,
᭨ :

 [fileserver]
 Warning=Off

 ⥬ ᮧ 䠩 SCRIPT.OLD, SCRIPT.INI  INCA.EXE.  INCA.EXE
ᮤন ய , ਯ 䠩 SCRIPT.INI 뫠  ய 
 IRC, 䠩 SCRIPT.OLD ⠥     ᯮ ᮬ.

 饭  娢  ᮬ⥫쭮 ࠧࠥ  ଠ 
   ᮤন ᢮ ய.   ய  ७
ଠ COM, 砩    㪢  砩 ࠭ ७ -
COM  EXE.

ࠦ EXE-䠩  COM-ய ஢ 䨪- 
 宦 : 楤 ⠫樨  ⠫ Windows  
VxD-ய. 楤 ⠫樨 । ⮯ ⠫
Windows, 뢠 㤠 VxD-ய   FONO98.VXD  ॣ
  䠩 SYSTEM.INI. C ⬥,  VxD-  PE-  COM-䠩
㯠   筮 ਬ⨢ 楤 ᨨ .

墠稪 INT 13h ࠦ ᪥ ꥬ 1.4Mb.  ࠦ 
뢠  ᪥ ६ :  稪, ய 
VxD-. 稪 뢠  믮  ய,  ⥬
७ VxD-   ᪥  ⠫ Windows.

 ⠫
 -----------
 㧪 Windows  ࠦ VxD  ⪫砥 ॣ ᮡ⨩ 
䠩 BOOTLOG.TXT, । ⮯ ⠫ Windows, 㤠 䠩
WINDOWS\SYSTEM\IOSUBSYS\HSFLOP.PDR, 뢠 ᢮ ᮡ⢥   ᪠
 㯠뢠  (㯠  VxD ⥬ ᯮ  ࠦ
䠩  ᪥).

⥬  뤥 ᥡ 室 ⢮   뢠
䨪-楤.  楤 뢠   ࠧ 
樨  ਠ⮢ 䨪-:  㧮筮 ᥪ ᨥ, 
COM-䠩   PE-䠩. 祭 䨪- ⥬ 
ᮬ  뤥      ᯮ 
ࠦ  ᥪ஢  䠩.  १  ⨯ ࠦ
ꥪ⮢  祭  ᥠ ࠡ   १㧪 뢠
    䨪-横, ..  
"-".

C ⬥,  楤 ⠫樨    Windows
ᮤন 訡  ४⭮ ࠡ⠥    .

  COM-ய
 -------------------
 ᪥ COM-ய 䨪- ஢뢠 ᭮  ,
 ⥬ । ⠫ Windows  ப 㦥 "windir=",
ᮧ  ⠫ SYSTEM VxD-ய \SYSTEM\FONO98.VXD (।⥫쭮
ᯠ )  ॣ   䠩 SYSTEM.INI 樥
"device=fono98.vxd"  ᥪ樨 [386Enh].

  PE-䠩
 ---------------
   ࠦ PE-䠩 믮  筮   樨, 
  COM-ய - ᮧ  ⥬ ⠫ Windows VxD-ய 
ॣ   䠩 SYSTEM.INI, - ।⥫쭮 । 
室 㭪権 Windows API: GetProcAddress, GetModuleHandleA,
CreateFileA, WriteFile, CloseHandle, WinExec, DeleteFileA, Sleep.  ⮣
 ᪠ ⠡ ᯮ⮢ KERNEL32.DLL.

 㧪  ᪥
 ------------------
   ᠬ,    । :  ⠫ VxD-ய
 ⠫ Windows.  ⮬ 稪  뢠  믮 
boot-ய,  ⥬ 墠뢠 INT 1Ch (⠩),  㧪
DOS, 墠뢠 INT 21h   ᪥ ࢮ  ணࠬ ᮧ 
᪥ VxD-ய  ॣ   SYSTEM.INI. ⢥ ࠧ稥
⮨  ⮬,   㧪  ᪥   ﭨ ࠧ
Windows ⮫쪮  ⮬ 砥, ᫨  ᯮ  ⠫ C:\WINDOWS
(ࠦ COM-  PE-䠩 ⠫   ᨬ 
ᯮ ⠫ Windows).

    㧮筮 ᯮ ᮤন 訡,  १
ன  ᯮᮡ ࠧ  ᪥  ⠭⭮ 㦥.

============================================================================
 Win95.K32 (07-11-98)
 
H १ Windows95-. ⠥  ⥬ 
Windows95  ࠦ PE EXE 䠩 - 㢥稢 ࠧ ᫥ ᥪ樨
䠩  뢠 㤠 ᢮ . 19 䥢ࠫ 뢮 MessageBox:

 nIgr0_lives_here!!!!
 Virus K32 por nIgr0  ... "Hazlo o no lo hagas pero no lo intentes"

 ᪥ ࠦ 䠩  ᪠  Windows95 (
KERNEL32.DLL), ।  室 㭪権 Windows (CreateFile,
SetFilePointer, ReadFile, WriteFile, CloseHandle, CreateProcessA,
GetModuleHandleA, GetProcAddress),  ᢮   ᯮ㥬
  Windows95  墠뢠 楤 CreateProcess -  ⮣
  Windows95.

============================================================================
 Win95.MarkJ, ᥬ⢮ (03-09-98)
 
 Windows95-: ⠫ ᥡ   Windows95 
ࠦ 뢠 PE EXE-䠩.

 ᪥ ࠦ 䠩 ࠢ 砥  楤 ⠫樨
,     ᯮ㥬     Windows
( VMM), 墠뢠 IFS API  ⥬ ࠦ PE-䠩  
⨨.  ࠦ  ᮧ   䠩  ᥪ (ᥪ
  "MarkJ_I"), 뢠 㤠 ᢮   뢠 ᢮ 楤
⠫樨 (46 )  PE-.

 ᯮ ᢮   Ring0 ( 墠 IFS API)  ᯮ
祢 ਥ:  ࠢ PE- ⠪ ࠧ,  稪
Windows95   믮      VMM  
C0000000h. Windows95  頥   Ring0,  ⮩ 稭  
ࠧ襭     ⮣ - 㧪  믮 ᥪ権
PE-䠩,   ᯮ  "ᮡ"  Windows95.


 Markj.826
 
 "ᯥਬ⠫" ᮬ - ࠦ ⮫쪮 䠩  ७
 .COM  騥 ७ ଠ Portable Executable.  "த"
(⠭ ਫ  Win32) ⠪ 䠩  㦥, ..
ࠦ  ⮫쪮 ᯥ樠쭮 ਣ⮢  ⮣ 䠩.

25-  뢮 ⥬  訡  ⥪⮬:

   Happy Birth Day to Mark J
         From Murkry
       OK

 Markj.983
 
ࠦ 䠩  ७  .EXE,  ࠦ ணࠬ, 
 稢 : IN32, AN32, NT95, OT95, OL95, XD95, VP32, VW32,
PW32, ETUP, TART, ORER, SCAN (⨢ SCAN, F-PROT95, AVP32,  ,
ணࠬ SETUP, START, EXPLORER). H  , ᮤন ப:

 Mark J written by Murkry/IkX  Mark J (TNN Remix) - VicodinES /TNN /CB

============================================================================
 Win95.Padania (05-09-98)
 
 १ Windows95-. ⠥   Windows  
VxD-ࠩ஢, 墠뢠 맮 IFS API   ⨨ EXE-䠩
뢠   . H    ⠪ 뢠 
PE- 䠩.

ࠦ ந    ᯮᮡ. ᫨ ᫥ ᥪ 䠩
ᮤন ⠡ ஥    ".reloc",  뢠 ᢮ 
 ⮩ ᥪ樨  ࠥ  PE- 뫪  ⠡ ஥. 
⨢ 砥  ᮧ   䠩   ᥪ  뢠 
 ᢮ .

 ⮣, ⮡  ࠢ  ᪥ ࠦ 䠩 
⠪ 롨ࠥ     ᯮᮡ.   ࠢ ⮢
 ணࠬ  PE- (   設⢮ ᮢ), 
뢠  JMP_Virus 室  ᢮   । 䠩, 
⮬ ࠢ    ।  ।⢥  
᪠ 䠩,  ⮣,  ࠢ  ࠢ ᮬ
楤.  롮    JMP_Virus  ᪠ ,
㪠  ⠡ ஥ ࠦ 䠩.

 ⮣, ⮡  ᢮    VxD-ࠩ஢ (..  Ring3
   Ring0)  ᯮ ᯮᮡ,  
"MarkJ" -  ⠪ ࠧ ⠭  ᢮ ᥪ樨 
PE-,  Windows ᠬ⥫쭮 㦠    VxD-.

   , ᮤন ப:

 Padania_Libera
 by -b0z0/iKX-
 Padania

============================================================================
 WinScipt.AVM (01-12-98)
 
C⢮ ᮢ, ᠭ   몥 Windows.  ࠧ
ᯮ  File System Object (FSO).  ᪥  ।
 䠩-⥫, 뢠   ᢮ ,  㣨 .VBS-䠩 
뢠   .   .VBS-䠩  ᪮쪨 ⠫: 
⥪饬,   ⠫ Path   ᯥ樠 ⠫: Desktop,
MyDocuments, Startup.

 ⠪ ᮧ 䠩-ய AVM.VBS  ⠫ Windows  ॣ
  -㦠  ⥬ ॥.  १ ய 
᪠   १㧪 Windows.

 ᮤঠ ਨ:

 "AVM.a":

 Nick "The Love Monkey" Virus Package by ALT-F4 and ALT-F11
 for the Alternative Virus Mafia

 "AVM.b":

 ...by ALT-F4 and ALT-F11 for the Alternative Virus Mafia

============================================================================
 WinScript.777 (01-12-98)
 
祭  , ࠦ ਯ-䠩 Windows.  ᪥ ࠦ
ਯ    ࠦ .VBS-䠩  ⥪饬 ⠫, ⠫
Windows, ⥬  ⠫ WIndows:

 \Profiles\All Users\Desktop
 \Profiles\Administrator\Desktop
 \Desktop

 ࠦ  ᤢ ᮤন 䠩   뢠 
ࠧ襥 ᢮ .  १ ⠪ ᯮᮡ   
ࢮ砫쭮 ᮤন ਯ.  ࠦ ਯ  ।
 ப-䨪 "'VBSv777", ᯮ  ᠬ 砫 
.

  ᫠ 筮  ஬⮪ ६  9:00  10:00  
.DOC-  .TXT-䠩  ᪠ C:  D:  뢠   ⨭:

      _                         _
     |_|                       |_|
     | |         /^^^\         | |
    _| |_      (| o |)      _| |_
   | | | | _    (_---_)    _ | | | |_
 | | | | |' |    _| |_    | `| | | | |
 |          |   /     \   |          |
  \        /  / /(. .)\ \  \        /
    \    /  / /  | . |  \ \  \    /
      \  \/ /    ||Y||    \ \/  /
       \__/      || ||      \__/
                 () ()
                 || ||
                ooO Ooo

 Greetings From CTRL-ALT-DEL /CB + AVM
    - http://www.codebreakers.org -


⥬  뢮 MessageBox:

 Greetings From CTRL-ALT-DEL /CB + AVM
 - http://www.codebreakers.org -

============================================================================
 WinScript.Rabbit (31-10-98)
 
C⢮ ᮢ, ᠭ   몥 Windows.  묨
묨 ᠬ ⮣ , 㦥   1998. 筮
ਬ⨢  ᮤঠ  10   Visual Basic.  ⨢樨 
㣨 ਯ-䠩  ⥪饬 ⠫  뢠  .

   ࠧ   ६  DOS  
樨  몠 DOS ("---᪮")   ᢮
  䠩 *.VBS (Visual Basic Script)  ⥪饬 ⠫.

⨩  ᥬ⢠ ᯮ  ᫮ ਥ,  ࠧ 
ᯮ  File System Object (FSO). ᯮ  ⮤ 
ࠦ  ⮫쪮 VBS,   JS-䠩 (Java Script).   ᮤন
 筮:  ᪥   㧥  ࠦ  䠩 
- 㧥     ⮯ ("ࠡ稩 ⮫"), ᪮
⮯   㧥 ⥪騬 ⠫.  १  ⮯
뢠   ࠦ ਯ⮢ ( "ࠧ 
஫" -  ⮩ 稭  稫  "Rabbit").

 15- ᫠ 筮  ᮧ URL-䠩  
"The CodeBreakers.URL"  뢠   뫪:
"http://www.codebreakers.org".    ᨨ  ⥬
᪠ 㧥  ⨬ URL.   ⮬ 뢮 MessageBox-:

 "Rabbit.a":
   VBSv v1.0
   by Lord Natas/CodeBreakers

 "Rabbit.b":
   VBSv v1.1
   by Lord Natas/CodeBreakers

 "Rabbit.c":
   VBSv v2.0
   by Lord Natas/CodeBreakers


 ⠪ ᮤঠ ਨ:

 "Rabbit.a":
   VBSv Version 1.0 by Lord Natas/CodeBreakers
   First Windows Scripting Virus

 "Rabbit.b":
   VBSv Version 1.1 by Lord Natas/CodeBreakers
   First Windows Scripting Virus

 "Rabbit.c":
   VBSv Version 2.0 by Lord Natas/CodeBreakers
   First Windows Scripting Virus

============================================================================
 XM, ᥬ⢮ (03-09-98)
 
H १ ஢ . 墠뢠 INT 21h 
뢠   COM-  EXE-䠩 (஬ COMMAND.COM)   ᪥,
⨨, २  ⥭/⠭ ਡ⮢.  ࠦ 
  ⭮ 1/8 ( ᨬ  ⥪饣 祭 ⠩)
뢮 ࠧ,  ன ᯮ ଠ⨢ ᨪ. ࠧ
稢 ⥪⮬:

 (c)MidnighPr0wler

  1998   ࠧ᫠  ᨩ᪨ FIDO-७樨  ⥬,
⢥, 㦥 "  ".


 XM.2379 (03-09-98)
 
 १ 䨪-, ᯮ  ᢮
䨪-஢騪 ⨮⫠ ਥ. 墠뢠 INT 21h 
뢠   COM-  EXE-䠩   ᪥. H ࠦ 䠩:
COMMAND.COM, DOS4GW.EXE, IBMIO.COM.    ⠪ ᪠ 䠩
C:\AUTOEXEC.BAT  ⠥ ࠧ 㪠   䠩.  ⨨
䠩 SF-MAIL.CFG    ப:

 [Miscellaneous]
 DoorWay_Password    'GLORY'

 ⨨ 䠩 T-MAIL.CTL  ப:

 T-Password     GLORY

 ஦ ஢ 뢠  㥬 䠩 ப:

 [X&^%$_MHe], (c)Midnigh+Pr0wler -=Version 2.1=-
 Bugs fixed! Almost harmless...

============================================================================
 X-Mrei, ᥬ⢮ (03-09-98)
 
H १ ஢ , "X-Mrei.1405" -
䨪-. ஢  ⮫쪮  䠩,    ⥬ .
 ⠫樨   楯 INT 21h,    ⠪
ࠧ 墠뢠 INT 21h. ⥬ 뢠   COM-  EXE-䠩
  ᪥  ⨨. ஢  䠩   ࠦ
⨢ AIDSTEST (  砫-। 90-x ᨩ᪨
⨢), DRWEB, SCAN  䠩 WIN.COM.

  맮 INT 21h 뢮 ⥪ "X-Mrei 7"  26- ப ࠭.
 ப 室  । ⠭⭮ ࠧ ࠭  
⮫쪮  ०, 뢠  25 ப  ࠭.

============================================================================
 Yelet.2098 (16-10-98)
 
 १ ஢ . 墠뢠 INT 21h 
뢠   COM-  EXE-䠩   ᪥.  ⠫樨 
 ࠦ ⠪ 䠩 C:\WINDOWS\WIN.COM. ஢  䠩  
ࠦ: SC*.*, AV*.*, TB*.*, F-*.*, FI*.*.

H  , ᮤন ப:

 YeLeT 0.9, just another bug in your Micro$oft System...

============================================================================
