Tabulero-B: A later variant of the Tabulero virus indicated
above, it does not reinfect .EXE programs. The text
strings found in this variant are:
"pTpApBpUpLpEpRpOp p"
"ISRAEL"
"ODALUBAT atse CP us, otreum ah LEMRAC"
"--IUP LUIS CABALLERO MEJIAS--"
Origin: Unknown September, 1992.
Tabulero 2: Another variant of the Tabulero virus, this variant
does not reinfect previously infected files. The text
strings contained within the viral code are:
"ODALUBAT atse CP us, otreum ah LEMRAC"
"--IUP LUIS CABALLERO MEJIAS--"
"Wilmer 86-Phonix (R) Rescue antivirus version 2.1"
"Copyright (C) Phonix Corp 1987-1990.
All right reserved."
"Immunizing"
"No path especifed or no found"
"Example RESCUE A:"
"pTpApBpUpLpEpRpOp p"
"ISRAEL"
Variant D
Subject: ILOVEYOU
Message: kindly check the attached LOVELETTER coming from me."
Attachment: LOVE-LETTER-FOR-YOU.TXT.vbs
Special Notes: Creates registry entries as WIN- -BUGFIX.exe instead of WIN-BUGSFIX.exe.
Variant E
Subject: Mothers Day Order Confirmation
Message: We have proceeded to charge your credit card for the amount of $326.92 for the mothers day diamond special.
We have attached a detailed invoice to this email. Please print out the attachment and keep it in a safe place.
Thanks Again and Have a Happy Mothers Day!
Attachment: Mothersday.vbs
Variant F
Subject: Dangerous Virus Warning
Message: There is a dangerous virus circulating. Please clickattached picture to view it and learn to avoid it.
Attachment: virus_warning.jpg.vbs
Elk Cloner: The program with a personality.
It will get on all your disks It will infiltrate your chips Yes its Cloner!.
It will stick to you like glue. It will modify ram too.
Send in the Cloner!