Virus Database

Junkie.1027

Description Junkie.1027

This is a memory resident multipartite encrypted harmless virus. It hooks INT 13h, 1Ch, 21h and writes itself to the end of COM files that are executed or opened, and floppy boot sectors while reading from floppy and MBR of hard drive while executing of infected file.
The virus contains the internal text strings:
DrW-3
Dr White - Sweden 1994
Junkie Virus - Written in MalmoallM01D

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Alamat

Description Macro.Word97.Alamat

This is a dangerous macro-virus. It uses an ordinary way to spread - it infects the global macros area upon opening an infected document, other documents get infected upon their opening or closing.
The virus has many payload routines. Each of them is activated only one day per month:
1 - the virus inserts in document the text:
Alamat brought to you by Lucky Warrior

2 - disables "Table" menu command
3 - disables "Help" menu command
4 - deletes all files in root folder of drive C:
5, 25, 27 - deletes all files in folders:
C:progra~1Drsolo~1Anti-V~1*.*
C:Program FilesNorton~1*.*
C:progra~1mcafeeviruss~1*.*
C:progra~1pc-cil~1*.*

6 - deletes all files in "C:Windows" folder
7 - saves documents with password "Alamat"
8 - prints document with added note "Your're infected with the Alamat virus!"
9 - changes Windows registerd onwer name to "Lucky Warrior"
10, 30 - deletes all files in "C:Windows" and "C:Winnt" folders
11 - deletes one character at cursor position.
12 - opens "www.playboy.com" site
13 - displays Office Assistant with message:
Warning!
Ms Word is suffering from unknown virus!

14 - modifies the system registry to display a message before system log-on:
Lucky Warrior
Welcome to the world of Alamat!

15 - replaces all "of" words by "Alamat" and then deletes commands "Replace" from menu
16 - hides Office Assistant and mouse cursor
17 - changes Word window caption to "Alamat"
18 - disables "File" menu item
19 - exits Word just after document open
20 - deletes all files in "C:Progra~1System" folder
21 - disables "Edit" menu command
22 - disables "View" menu command
23 - disables "Insert" menu command
24 - disables "Format" menu command
26 - exits Windows
28 - changes Word user information:
UserName = "Lucky Warrior"
UserInitials = "LW"
UserAddress = "Bgy. Tiguib, O.E.S."

29 - disables "Window" menu command

Macro.Word97.Alarm

Description Macro.Word97.Alarm

This virus contains only one macro AutoOpen. It infects the files that are opened. It also hooks the timer and each 5 minutes infects the global macros area and current document, if they are not infected. The virus does not manifest itself in any way.

Home