Virus Database

Hider.2169

Description Hider.2169

This is a dangerous non-memory resident encrypted parasitic virus. It searches for COM (except COMMAND.COM) and EXE files, and writes itself to the end of the file. It deletes anti-virus data files. It contains the text string:
*.MS *VIR.DAT COMMAND.
On 13th of each month it plays a tune and display the message:
Anston Rant Returns! Miss me, folks?
I'd trash some data, but my medication kicked in!

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Sparkle

Description Macro.Word97.Sparkle

This is a stealth macro-virus. It contains three modules and 11 functions:
"Sparkle" - FileSave, Toolsmacro, Filetemplates, Sparkle,
Toolsmacro, Filetemplates, ViewVbCode,
"userform999" - ListBox2_Click, UserForm_Initialize, CommandButton2_Click,
CommandButton5_Click, UserForm_Click,
"userform900" - CommandButton1_Click, CommandButton2_Click,
CommandButton3_Click, CommandButton4_Click,
CommandButton5_Click, CommandButton6_Click, ListBox2_Click,
ScrollBar1_Change, UserForm_Click.

On saving files (FileSave), the virus disables the VirusProtection, infects the global macros area and documents.
The virus draws its own dialogue on entering the Tools/Macro menu (stealth). On pressing any button (except "Cancel"), the virus displays the MessageBox:
Microsoft Word
This program has performed an illegal operation and will shut down.

Macro.Word97.Splash

Description Macro.Word97.Splash

This is a polymorphic macro-virus. It contains only one macro Splash and one function AutoClose. The virus replicates itself on closing documents. On any infection, the virus randomly inserts into its text 20 lines of comments. The virus does not manifest itself in any way.

Home