Virus Database

Gigi.1283

Description Gigi.1283

These are dangerous memory resident encrypted parasitic viruses. They hook INT 21h and write themselves to the end of .COM files that are executed. The viruses do not infect the files: VSAFE.COM, COMMAND.COM, WIN.COM. They have bugs and install themselves two and more times in the system memory, as a result in some time the system halts.
The viruses contain the text strings:
SUCKER
.COM VSAFE COMMAND WIN

"Gigi.1449" contains the texts:
Gigi Euristicu' v1.0 * RoMaNiA
Only COM infector but a new generation is comeing all
Copyright [C] 1996-97 Elecktronick RAT & Pink Phanter
Special thanks to GikuABS (Ps!ko)
Who's General Failure and what's he doing on your HD ?

Check other viruses! Be aware! Use Antiviral Software

Constructor.Macro.Word97.CPCK

Description Constructor.Macro.Word97.CPCK

This is a macro Word97 virus construction tool. The constructor itself is a Word97 document that contains sixteen modules: CPCK, IntroFrm, Page1, OptionsFrm, PayloadFrm, Export, Done, vsmp, RegFrm, InsultFrm, WDMfrm, PlugInFrm, Class1, About, Main, TriggerFrm.
When run, the constructor displays a picture containing the text "Class.Poppy CONSTRUCTION KIT by VicodinES". It then displays a menu with many future virus settings. The tool allows to choose methods of replicating, polymorphic mechanisms, methods of interception and many effects of different kinds.
Generated effects can operate on calendar days, and they display MessageBoxes, dialogues, edit system registry, etc. It is also possible to add a "customized" effect that is entered as a Visual Basic subroutine.
The constructor then requests a virus name and creates an infected document.

Constructor.Macro.Word97.DW97Mvck

Description Constructor.Macro.Word97.DW97Mvck

This is a macro Word97 virus construction tool. The constructor itself is a Word97 document that contains seventeen modules:
DW97MVCK, frmStartForm, frmVirusSourceName, frmVirusBody, frmStealth,
frmRetro, frmPolymorphic, frmPayload, frmPayloadMessageBox,
frmPayloadSetPassword, frmPayloadBeep, frmPayloadExitWindows,
frmPayloadOfficeAssistant, frmPayloadChangeStatusBar,
frmPayloadChangeCaption, frmMacros, and frmMakeVirus.

When run, the constructor displays a MessageBox and the text "DW97MVCK v1.0". The constructor then asks for the virus name, output file name for the virus source, virus type, effects, headers for prints, and status bar. There are several effects available:
MessageBox
Set Password
Beep
Office Assistant
Change Caption
Change StatusBar
ExitWindows

Home