Virus Database

AntiEXE.a

Description AntiEXE.a

These are very dangerous, memory-resident boot viruses. They hook INT 13h, and infect the MBR of the hard drive and the boot sectors of the floppy disks. They check the accessed sectors for an EXE header (MZ/ZM stamp), and corrupt some EXE files that are executed or while reading/writing from/to these files.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Edds

Description Macro.Word97.Edds

This virus contains twenty macros in one module - "EddsHead". The virus replicates itself upon execution any of its macros.
The virus contains the comments:
Produced by,
The VicodinES Macro.Poppy Construction Kit v1.0b
================================================
Code Written by VicodinES "Live for Now"
Poppy ID : 24421479963

If the NORMAL.DOT file has the ReadOnly attribute set, the virus creates the C:WINDOWSSTARTM~1PROGRAMSSTARTUPMSFILE.BAT file that upon rebooting clears this attribute and erases the NORMAL.DOT.
The virus replaces the disks' icons. Depending on a random counter, the virus displays the following MessageBox:
Your Computer Has The Edds Head Virus

On February 14 (Valentine's Day), it displays the following MessageBox:
Birthday Greeting!!!
I Hope You Got Your Girlfriend Something Nice !

Depending on a random counter, the virus copies the current file to a randomly selected disk from F: to S: with one of the following names: PORNO.DOC, README!.DOC or SEX.DOC.

Macro.Word97.Epsilon

Description Macro.Word97.Epsilon

It contains six macros in one module "Epsilon": AutoExec, AutoOpen, FileSaveAs, FileTemplates, ToolsMacro, ViewVBCode.
The virus infects the global macros area on opening an infected document, after infection the virus displays the MessageBox:
Epsilon97
Attention, je vous ai contaminéall
HAHA !!!!!

The virus infects documents on saving with new name.
On entering the File/Templates menu it displays the MessageBox:
Microsoft Word
System Error!!!

and renames this menu item with "Epsilon97, c'est COOL!!!!" or "Mod les et compl ments..." depending on system random counter.
On entering the Tools/Macro menu it displays the MessageBox:
Microsoft Word
User32 Error!!!!

and renames this menu item with "ZeMacroKiller98 va vous tonner..." or "Macros".
On April 18th the virus displays the MessageBox:
Epsilon97
C'est mon anniversaire, aujourd'hui

then it writes to the C:AUTOEXEC.BAT file the drive formatting instruction, displays the MessageBox and reboot the computer:
Epsilon97
Au revoir....

Home