Virus Database

I-Worm.CoolNow

Description I-Worm.CoolNow

This is a virus-worm that spreads via the Internet using MSN Messenger (instant messaging program). The worm itself is a JS-script (Java Script) located in an HTML file. It sends messages that contain an URL pointing to an infected Web page.
When the worm is executed, it obtains the MSN Messenger contact list, and sends to all its recipients the following message:
"URGENT - Go to http://www.rjdesigns.co.uk/cool Now"
This address points to an HTML-file, which contains the worm's body.
After sending infected e-mail messages, the worm uses a script, which is located at the same site, to send a e-mail message to "jonathansmith288@hotmail.com" . This message contains the IP address of the infected computer, and redirects the user to the following address:
"http://www.rjdesigns.co.uk/cool/go.htm"
The worm doesn't contain any payloads.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.PCW

Description Macro.Word.PCW

It is an encrypted virus. It contains two macros: AutoOpen, DateiSpeichernUnter and infects global macros area on opening an infected file, and writes itself to documents on saving them with new name (FileSaveAs).
If day number >= 15th and month number >= 7 (July) the virus displays the message box with the text:
Happy Birthday
Herzlichen Glückwunsch
Susanne B. aus E.
zu deinem Geburtstag
Ich liebe dich

Macro.Word.Pejuang

Description Macro.Word.Pejuang

This virus contains three macros:
Documents: NORMAL.DOT:
Perjuangan FileSaveAs
AutoOpen Revolusi
Public Public

The virus infects the global macros area (NORMAL.DOT) on opening an infected document and writes itself to documents that are saved with new name. Depending on current date it erased system files or formats the C: drive. The virus contains comments:
YOGYAKARTA 96
PESAN INI UNTUK MENGETUK HATI NURANI RAKYAT
MARI BERJUANG BERSAMA KAMI
TEGAKKAN KEADILAN YANG TELAH DIINJAK-INJAK
UNDERGROUND PUBLIC MESSAGES
!!!!!!!!!!!!!!!!!!!!!!!!!

Home