Virus Database

Jorgito.636

Description Jorgito.636

This is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed.
Starting from 1998 the virus decrypts and displays the message:
Jorgit_ Was Here

Check other viruses! Be aware! Use Antiviral Software

Constructor.Macro.Word.Cvck

Description Constructor.Macro.Word.Cvck
This is a CVCK-based virus. It contains 11 macros: AutoExec, AutoOpen, Action, Action2, stdClose, HelpAbout, Organizer, ActionDate, ToolsMacro ( Ñ+ ), FileTemplates, and ToolsCustomize.
It infects the global macros area upon the opening of an infected document, and is written to documents upon closing.
On the 11th and 31st, it displays DialogBoxes, and upon entering the Tools/Macro and File/Templates menus, it displays the following:
Chicken say all......
[pox-poX-pOX-POX-POx-Pox-pox]
Hello there......., this command was blocked by Chicken Pox Macro Virii
This is sample from Our Generator Virii, we named our generator CVCK V0.2.
It's very user friendly !, try it ! This Virii is not Dangerous !, If you
want try our CVCK V0.2 email Us on "nomercy12@hotmail.com"

Cvck.b
This is a CVCK-based virus. It contains six macros: AutoExec, AutoOpen, Action, Stealth, StlhClose, and ActionDate. In NORMAL.DOT, the virus has three additional macros: ToolsMacro, ToolsCustomize, and FileTemplates.
It infects the global macros area upon opening an infected document, and it is written to documents upon closing.
Upon entering the Tools/Macro and File/Templates menus, the virus erases files in the C:WINDOWS directory. On Fridays, it erases the text in the current document.
Cvck.c
This is a CVCK-based virus. It contains six macros: AutoExec, AutoOpen, Action, Stealth, StlhClose, and ActionDate. In NORMAL.DOT, the virus has three additional macros: ToolsMacro, ToolsCustomize, and FileTemplates.
On the 13th of any month, it displays the DialogBox:
Visit NoMercy WEB PAGE !

http://www.geocities.com/ReseachTriangle/3996
Welcome Again buddy!. It's nice create a Virus, why you don't try?
Like always, We made new If Our Macro Viruses was detectable by famouse AV
Visit http://www.geocities.com/ReseachTriangle/3996 for know newest
Macro Virus from Us and Indonesian Macro Virus!

The virus also contains the comments:
--------------------------------------------
Created using CVCK v.01 b
(C)CrazybitS 1997, Yogyakarta, Indonesia
--------------------------------------------
greeting to
-Cicatrix major collector
-D.Giovanni
-All Macro virii creator
-You that has seen the decription macro

Cvck.d
This is a CVCK-based virus. It contains ten macros: AutoExec, AutoOpen, Action, stdClose, FilePrint, ActionDate, ToolsMacro, EditAutoText, FileTemplates, and FilePrintDefault.
On the 1st and 13th of any month, it erases the text in the current document, and displays the following DialogBox:
You have fOX'Z in your computer !
Hey, No body can use Microsoft Word Today !!
Yogyakarta, Indonesia by :
Fox'z,

On printing a document the virus inserts the text:
Try to print tomorrow buddy , today your computer want rest (today is a
holiday?) --Foxz--

Constructor.Macro.Word97.CPCK

Description Constructor.Macro.Word97.CPCK

This is a macro Word97 virus construction tool. The constructor itself is a Word97 document that contains sixteen modules: CPCK, IntroFrm, Page1, OptionsFrm, PayloadFrm, Export, Done, vsmp, RegFrm, InsultFrm, WDMfrm, PlugInFrm, Class1, About, Main, TriggerFrm.
When run, the constructor displays a picture containing the text "Class.Poppy CONSTRUCTION KIT by VicodinES". It then displays a menu with many future virus settings. The tool allows to choose methods of replicating, polymorphic mechanisms, methods of interception and many effects of different kinds.
Generated effects can operate on calendar days, and they display MessageBoxes, dialogues, edit system registry, etc. It is also possible to add a "customized" effect that is entered as a Visual Basic subroutine.
The constructor then requests a virus name and creates an infected document.

Home