Virus Database

Frz.1567

Description Frz.1567

It's a dangerous memory resident parasitic encrypted virus. It hooks int 21h and writes itself to the end of .COM- and .EXE-files that are executed. On 666th infection it erases the CMOS of the computer. On debugging it erases the interrupt table and hangs up the computer. It contains the internal text string: "Frz".

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Dig

Description Macro.Word97.Dig
Dig is a stealth macro virus. It contains the following macros:
AutoOpen, AutoExec, FileSave, FileSaveAs, ToolsOptions, ToolsMacro, ViewVBCode.

When an infected file is opened the virus disables the VirusProtection and DisableAutoMacros security options. The virus infects documents while they are opened, closed, or saved with alternative names (AutoOpen, FileClose, FileSaveAs).
The virus hides its body while Tools/Macro or File/Templates menu items are invoked.
If the user tries to view the macros source code, the virus calls the FatalAppExit system function and displays the following message:
"?R?Ç'Í WinWord ?Ì? ' Ä × 'Í-ÇÏ Rɳ??Ç ?Á³ ?ÌR?? VBA! Code : dd!Actor"
If the current hour and minute values match (for example, 8:08) while the virus is infecting a document, it creates a new auto-format rule that replaces "," with ", ?'³-," and shows a message box with the following text:
Copyright c 1999 by dd!Actor.
All rights reserved.

Macro.Word97.Dna

Description Macro.Word97.Dna

This is a stealth macro virus. It contains ten macros in one module "DNA": AutoOpen, AutoClose, AutoExit, FileSaveAs, filesave, fileclose, fileprint, viewvbcode, ToolsMacro, FileTemplates.
The virus replicates itself on documents opening, closing, saving and saving with new name documents. It infects the system twice: infects the NORMAL.DOT file by using the export/import virus code through the C:DNA.SYS file, then it saves the current infected document in the Excel startup directory.
The virus creates and runs the C:.COM infected with the "Dna.1206" DOS parasitic virus. On entering the "Tools/Macro/Visual Basic Editor" menu the virus displays the MessageBox:
MS Word message
Visual Basic not available.

Home