Virus Database

HXH.1680

Description HXH.1680

This is a benign memory resident polymorphic parasitic virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are executed or accessed by FindFirst/Next FCB DOS functions (DIR command). On February 19, the virus hooks INT 1Ch, plays a tune and displays the following message:
HXH:
Wherever,Long Live Our Friendship!
Good Luck With You! My Friend.
Yours Sincerly 6162910

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Cryptor

Description Macro.Word97.Cryptor

This virus contains six macros in module "CryptorV97": AutoOpen, AutoClose, FileSaveAs, FileTemplates, ToolsMacro, ViewVBCode. It infects the global macro area on opening an infected document and infects documents on saving with new name.
The virus disables Word virus protection. On odd days the virus encrypts the document contents. After infecting NORMAL.DOT or a document it displays corresponding MessageBox:
Virus CryptorV97 Virus CryptorV97
Attention, modèle normal crypté ???? ZeMacroKiller98 vous remercieall
On entering the menu items "Tools/Templates and Add-Ins...", "Tools/Macro" and "Tools/Macro/Visual Basic Editor" the virus displays corresponding MessageBox:
Microsoft Word
Espace pile insuffisant.
Microsoft Word
Fonction Sub non défini
Microsoft Word
Ce programme a réalisé une opération illégale et va être interrompu.

Macro.Word97.Cyberhack

Description Macro.Word97.Cyberhack

This virus contains 25 macros in module "CyberHack": coba, CyInit, CyClose, Dok2Nor, Nor2Dok, Cyber, Tahan, Simpan, AutoOpen, FileClose, FileOpen, FileSaveAs, FileSave, HelpAbout, FileExit, ToolsOptions, FileNew, FileTemplates, ToolsMacro, ToolsCustomize, ToolsCustomizeKeyboard, ViewVBCode, Organizer.
The virus replicates on executing any auto macro, i.e. on opening documents, closing, saving etc.
The virus erases the menu item Tools/Macro. It also disables macros-viewing hot keys. On Friday on entering the menu item Help/About or on closing Word application the virus displays a form containing an image of virus' authors and their names.

The virus also contains the comments:
Macros By WinK'S Hacker
Picture By Casper Satan
Lebih baik mencoba dari pada tidak tahu sama sekali all
Mohon ma'af bila telah mengganggu Anda.
Microsoft memang gila ! Nambahin fasilitas pemrogramannya
keterlaluan untuk suatu word prosesor.
jangan harap kau datang lagi padaku

Home