Virus Database

Macro.Office97.Jerk family

Description Macro.Office97.Jerk family

These are multi-platform macro-viruses infecting Office97 components: Word documents and Excel workbooks and sheets. The viruses contain two auto-macros in Excel sheets and Word documents: Document_Close in Word documents, and Workbook_Deactivate in case of Excel workbook or Worksheet_Deactivate in case of Excel sheet.
The viruses replicate themselves in Excel upon deactivating workbooks. In Word, the viruses replicate upon document closing. Upon spreading, the viruses infect not only "native" objects, but also export their code to another Office component if it is installed in the system.
The viruses turn off the VirusProtection MS Office option.
Each month from June to December on the 14th ,the "Jerk.a" virus displays the message:
Class.Poppy
I think is a big stupid jerk!

On the same date "Jerk.b" and "Jerk.d" display an encrypted variant of the same message:
www.all.net
V guvax vf n ovt fghcvq wrex!

Check other viruses! Be aware! Use Antiviral Software

Nygus Family

Description Nygus Family

These are harmless memory resident parasitic viruses. They write themselves to the end of the files. These viruses contain the strings:
"Nygus.227": Nygus v1.1
"Nygus.278": (c)Nygus v1.1
"Nygus.295": (c)Nygus v1.2
"Nygus.752,757": (c)Nygus v2.0

"Nygus.227,278,295" are nonmemory resident viruses. They search for .COM files and infect them.
"Nygus.752,757" are memory resident viruses. They hook INT 21h and infect .COM and .EXE files that are executed.

Nymphet.1024

Description Nymphet.1024

It is a dangerous memory resident parasitic virus. It hooks INT 21h and on changing current directory searches for .COM and .EXE files and writes itself to the end of files. The virus has a bug and infected files may halt the system. The virus contains the text strings:
*.com *.exe
NYMPHET ver. 1.0

Home