Virus Database

IM-Worm.Win32.Opanki.d

Description IM-Worm.Win32.Opanki.d
This worm is written in C, and is packed using MEW and PE_Patch. It spreads as a link across the AIM network and has Trojan-Dowloader capabilities. The packed body is 3 973 bytes in size. MD5: 4d0a71e9e37a73bd27932e13d03b7ec0 Installation This worm arrives as a link via the AOL Instant Messagingall

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Daniel.a

Description Macro.Word.Daniel.a

This is an encrypted macro-virus. It contains two macros:
NORMAL.DOT Infected files
MacroManager MacroManager
Word6Menu AutoOpen

When the system opens an infected file, the virus takes control and copies its macros to the global macros area. To get a control the virus not only uses its AutoOpen macro, but also sets its macro "MacroManager" as executed on File/Save command and on Ctrl-S and Ctrl-B keys. When that macro is executed, the virus infects current document.
To hide itself in system the virus removes the menu items that access macros. While infecting a document the virus sets new file summary info fields:
Keywords = "Daniel_Stone"
Comments = "All information should be free."

The virus contains remarked texts:
You've reached! Here is the virus. Enjoy.
This is the Word_Macro_Virus_Daniel_1F - Beta International Version.
Please Support the Virus Concept. Have a nice Day! (BR/US)

Macro.Word.DarkSide

Description Macro.Word.DarkSide

This is not a dangerous encrypted Word macro virus. It is related to the "MDMA" virus. It contains four macros: AutoClose, DarkSide1, HerramMacro, ToolsMacro. It infects the documents and the global macros area on AutoClose call.
The virus disables Tools/Macro menu (Herram/Macro in Spanish). It creates on disks the DARKSIDE.1 files and writes the texts to there:
ATENCION: esta computadora ha sido infectada!. DarkSide1 sin una
computadora es como Billy The Kid sin un revolver! ! . . . Virus DarkSide1
creado en la ciudad de Lima en enero de 1997 -=] DarkSide1 Is a peruvian
virus writer [=-

The virus also contains the REMarked comments:
DarkSide1 is in the wild!!! :-)
DarkSide1's E-Mail: virology@usa.net
DarkSide1's live in Peru!!

Macro.Word.DarkSide.b
This encrypted virus contains three macros: AutoClose, DarkSide1B, HerramMacro. It creates the DARKSIDE.NEW file in current directory on C: drive and writes the text to there:
DarkSide1 is Back!!
The name of this macrovirus is DarkSide1.B
Caro's name Dark.A ?! Caro Sucks!! :)
And rememberall DarkSide1 whitout a computer is like...
Billy the Kid without a gun!! :)
WM.DarkSide1.B] by DarkSide1 in Lima Peru 1997

The HerramMacro macro contain the texts:
it's only a clean macro :) very easy !!
DarkSide1 is Cool Macro Virus Writer :)
I like the macrovirii scene...rocks!! :)

Home