Virus Database

Epa.867

Description Epa.867

This is a dangerous memory resident parasitic virus. It hooks INT 1Ch and 21h, and writes itself to the end of EXE files that are opened. If the current time is 39 min 1 second, the virus decrypts and displays the strings:
EPA POLLUTION PREVENTER V1.0 PRESS "POWER" KEY TO CONTINUE

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Crema

Description Macro.Word.Crema

This macro virus contains four macros: aUtoopen, CREMA, HerramMacro, archivoplantillas. It replicates itself on opening documents (AutoOpen). Depending on system random counter the virus displays the Message/DialogBoxes:
Crema Virus
Bl4cK Sc4v3ng3R - PERU
Tu tambien eres hincha!
Buena Crema!
SOY CREMA!!!! :-)
ESE ES LA U!!!!!
El mejor de los equipos!!

The virus does not exits DialogBox up to one of the strings is entered: "universitario", "lolo", "peru", "sc4v3ng3r".

Macro.Word.Cristall

Description Macro.Word.Cristall

This virus contains six macros: AutoNew, AutoExec, AutoOpen, CRIstall, OutilsMacro, EditionInsertionAuto. It infects the global macros area on opening an infected document (AutoOpen) and infects other documents on creating or opening (AutoNew, AutoOpen).
Starting from May 10th 1998 depending on system random counter the virus manifests itself with the effect:
either changes the font in current document for TimesNewRoman size 10;
or replaces character "e" with " " in document;
or calls one of the Web pages (if Internet Explorer is installed):
http://user.tninet.se/~syq123w/CRACKZ.HTM
http://nt3.nettaxi.com/citizens/kevinlee/crackz.html
http://www.crackz.com
http://www.sentex.net/~wizard/crackz.html
http://www.c3.hu/~piiti/warez.html
http://home.yezz.de/~hladek/warez.html
http://www.sawasdee.com/patrick/crackz.htm
http://ortugg.simplenet.com/crackz.html
http://www.nehp.net/mabrwn/home__appz__gamez__crackz__links.htm
http://hem2.passagen.se/ravez/crackz.htm
http://www.cbes.net/~lperfect/warez/appz.html
http://scriptz.habanero.ml.org/warez/
http://home.yezz.de/~hladek/warez.html
or creates a query on www.altavista.digital.com with a parameter from the list:
warez
crackz
pedophile
gamez
unix+near+brute+force
mastercard+breaking
serialz
cracking+and+root+mode
hacking

or deletes all *.INI and *.DA? files in C:WINDOWS directory;
or appends to the C:AUTOEXEC.BAT file a command that formats the hard drive.

Home