Virus Database

ALEX.599

Description ALEX.599

It is a harmless nonmemory resident parasitic virus. It searches for .COM files and writes itself to the end of the file. It contains the text string:
ALEX PATH=*.com

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Pendron

Description Macro.Word97.Pendron

This is a stealth macro virus. It contains 13 procedures in module "XBoss": Boss41, ToolsCustomize, ViewVBCode, FilePrintPreview, FilePrintPreviewFullScreen, ToolsMacro, ToolsOptions, FileSaveAs, AutoClose, AutoExec, AutoOpen, PlanetJangkit, TularComputer.
The virus infects global macros area on opening an infected document (AutoOpen), and infects other documents on their opening and closing (AutoOpen, AutoClose).
The virus turns off the Word virus protection (the VirusProtection option) and all Word sounds. It also hides the "Templates and Add-Insall" menu (stealth).
On infecting the virus modifies MS Word properties:
UserName = "Pendron"
UserInitials = "Gunadarma"

On entering the "ToolsMacro" menu the virus asks for a password:
Pendron Security
Enter Your Password:

If entered text is not "princess" the virus displays the message:
Pendron GN'R Production
You Wrong My Friend !!!

If 11th day of month falls on Sunday the virus displays MS Word baloon:
Hallo Sobat Semua....
Salam Buat Anak-Anak Gunadarma From Pendron

Macro.Word97.Persilman

Description Macro.Word97.Persilman

This virus contains eight modules: AutoExec, AutoOpen, FileSaveAs, FilePrint, FileOpen, FilePrintDefault, PersilMan, ClearKepek.
It infects the system on opening an infected file. It infects documents on saving them with a new name. Starting from May, starting from 21st of month if system time is not less than 55 seconds, the virus appends the strings to document, if it is printed:
PersilMan will take his revenge
you will be cleaned up by PersilMan, SOON

Home