Virus Database

Amber

Description Amber
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are closed. This virus is stealth on FindFist/Next calls. When several anti-viruses or file compressing utilities are run (ADINF, WEB, AIDSTEST, SCAN, ARJ, ZIP, LHA, RAR), the virus disables its stealth branches. The virus contains the text strings:
NFEBSTANRJIPHAAR
[·This is only ForeWord·]

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Fom.a

Description Macro.Word.Fom.a

This is an encrypted Chinese Word macro virus. It contains five macros: AutoOpen, FOM, ZlockMacro, FileTemplates, ToolsMacro (stealth).
The virus replicates itself when documents are opened (AutoOpen). The infection routine is placed in the FOM macro, it is called by AutoOpen to infect a document/NORMAL.DOT.
The virus displays a MessageBox in Chinese.

Macro.Word.Formater

Description Macro.Word.Formater

The virus contains five macros: AutoExec, AutoOpen, DLLError, ToolsMacro, ToolsCustomize. It replicates on opening documents.
In the WIN.INI file in the [Formater] section in the Activated string the virus keeps the counter that is increased on each loading Word with infected NORMAL.DOT.
On starting Word on August 20 the virus creates a new document and runs the text there:
Word Macro Virus Formater!!! by Formater . This is my birthday!
I'm <1998 minus current year number> years old! Don't try to find meall

On entering the Tools/Macro or Tools/Customize menu the virus displays the MessageBox:
Formater
Cannot find FORMATER.DLL. Windows
needs this file to run winword.exe

On entering the same menus on August 20 the virus displays the InputBox and waits for "Formater" input, otherwise it exits the Windows:
Formater
I'm a Word Macro Virus! I said: 'Don't try to find me!!!' You didn't
listen to me! Enter my name, or I will quit from Word without saving
documents! (do not press Cancle)

The virus contains the comments:
_____ ___ ____ __ __ _ _____ _____ ____
| ___/ _ | _ | / | / |_ _| ____| _ | |_ | | | | |_) | |/| | / _ | | | _| | |_) |
| _|| |_| | _ <| | | |/ ___ | | | |___| _ <
|_| \___/|_| \_\_| |_/_/ \_\_| |_____|_| \_The Word Macro Virus by Formater '98

Home