Virus Database

Find.666

Description Find.666

This is a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files on FindFirst and FindNext (AH=4Eh,4Fh) DOS functions calls.
During installation it overwrites one of the FAT sectors.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Surabaya

Description Macro.Word.Surabaya

This macro virus contains six macros: AutoOpen, FileSaveAs, Autoexec, ToolsMacro, FileTemplates, Plong. It infects the global macros area on opening an infected document (AutoOpen) and writes itself to documents that are saved with new name (FileSaveAs).
While installing into the system the virus creates new profile section (the WIN.INI file):
[Author]
Name=TeBeYe`93 The ICE-Man"

When already infected Word is started (AutoExec), the virus prints to the status line the text:
Lontong Micro Device (c) 1993 By ICE-Man

Macro Plong contains the remarked text:
This Macro was created by : The ICE - "Yes" Man
Allah Swt always be with All of You all.
Surabaya, 09-09-1996

On entering File/Templates and Tools/Macro menus the virus displays the MessageBox:
Sorry...

Macro.Word.Sveta

Description Macro.Word.Sveta

This virus contains two macros: AutoOpen, Sveta. It replicates on opening infected documents (AutoOpen): it searches for documents in FileList (recently used files list) and infects them. So the virus is "nonmemory resident" - it is active only when infected document is being opened, and AutoOpen macro takes control. When it releases control, the virus does not intercept any events and does not infect files (if, of course, NORMAL.DOT or some another auto-loaded template is not listed in FileList).
On activating at 13 seconds (i.e. on opening an infected document) the virus displays to the StatusBar the message:
----------======> SVETA by Kid Chaos [SLAM] <=======----------

Home