Virus Database

April4.751

Description April4.751

This is a very dangerous non-memory resident parasitic virus. It searches for .COM files, then writes itself to the end of the file. Under debugger and on April 4th, the virus formats the hard drive.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Bertik

Description Macro.Word.Bertik

This is an encrypted macro virus. It contains four macros that have different names in infected documents and NORMAL.DOT:
Documents NORMAL.DOT
AutoOpen YYYAO
XXXAO AutoOpen
XXXFSA FileSaveAs
XXXFS FileSave
PayLoad PayLoad

The virus infects the system on opening an infected document (AutoOpen) and writes itself to other documents on opening and saving (AutoOpen, FileSave, FileSaveAs).
On each infection the virus copies the WINWORD.HLP file to TEMPLATES .WRD file, where 'n' in number of infection. In case of error the virus displays one of MessageBoxes:
DúleOitè upozornini
!!! Tohle zpùsobil virus Bertik.1 !!!
!!! Made by virus Bertik.1 !!!

Macro.Word.Bilbo

Description Macro.Word.Bilbo

This macro virus contains six macros: FileOpen, FileSave, FileExit, AutoOpen, AutoExec, and Bilbo. It infects the documents and global macros area on FileSave and AutoOpen. Starting from the 10th of each month, this virus, on AutoExit, displays a MessageBox with the following text:
Bilbo Baggins was here!

Home