Virus Database

Andrew

Description Andrew

It is a very dangerous memory resident boot virus. It hooks INT 13h and writes itself to the MBR of the hard drive and boot sectors of the floppy disks. While installing into the system memory, depending on the system timer the virus formats the disk sectors. Contains the bugs, and in some cases halts the system. The virus contains the internal text strings:
ANDREW
Fuck'em Off

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Queen

Description Macro.Word.Queen

These are encrypted Word macro viruses. They contain the same comment:
(c) 1997 Master of Infection
QUEEN FOREVER!!!

"Queen.a" contains 5 macros: AutoExec, AutoOpen, FileSaveAs, ToolsMacro, ToolsOptions.
"Queen.b" contains 6 macros: AutoExec, AutoExit, AutoOpen, FileSaveAs, ToolsMacro, ToolsOptions.
"Queen.c" contains 2 macros: AutoOpen, FileSaveAs.
The virus infects the global macros area (NORMAL.DOT) on opening an infected document and writes itself to documents that are saved with new name.
They append to the end of documents the text:
(c) 1997 Master of infection
Queen Hitman Virus inc.
Come and enjoy ;) You can find my url at alt.*.virus.*
P.S. QUEEN FOREVER!!!

On entering the menus "Tools/Options" or "Tools/Macro" the viruses display the MessageBox:
(c) 1997 Master of infection

Macro.Word.Query

Description Macro.Word.Query

This is an encrypted silly macro virus. It contains two macros: AutoOpen, Query and infects the global macros area and documents on opening documents. Depending on system random counter the virus displays one of the MessageBoxes:
You have been visited by The Inquisitor. Innit. Homeboy. (Inquisitor 3 Virus)
Sod WordBasic! Use Visual Biscuit! (Inquisitor 3 Virus)
Virus? Virus My Anus! (Inquisitor 3 Virus)
You Bloody Simpleton! (Inquisitor 3 Virus)
Arse Biscuits! (Inquisitor 3 Virus)

Also depending on system random counter in 1% of cases the virus deletes the contents of current document.

Home