Virus Database

Macro.Word.Atom

Description Macro.Word.Atom

These viruses contain four macros: Atom, AutoOpen, FileOpen, FileSaveAs, and infects Word while loading an infected document (AutoOpen).
The viruses infect files in two ways: while opening a file (command File/Open, macro FileOpen), and while saving a document with new name (command File/SaveAs, macro FileSaveAs).
While infecting a document while saving it with new name (FileSaveAs) the virus checks the system time. If the value of seconds is equal to 13 the virus set the password ATOM#1 for this document. The virus cannot set the password if the file is already infected - Word displays the WordBasic error message.
While opening an infected document on 13th of December the virus deletes all files in the current directory. It seems that the system has to display the error message while deleting opened files.
"Atom.a"-related macro viruses differ from "Atom.a" only by placing their WordBasic text strings in virus source code. "Atom.g" is "Atom.a", translated to German - it contains macros: Atom, AutoOpen, DateiÖffnen, DateiSpeichernUnter.

Check other viruses! Be aware! Use Antiviral Software

Drop.1131

Description Drop.1131

It is a memory resident harmless virus. It infects COM- and EXE-files by standard way when they are accessed. It hooks INT 1Ch and 21h. Depending on its internal counter the infector can drop letters on the screen.

DrunkAvenger

Description DrunkAvenger

It's a harmless memory resident parasitic virus which hooks INT 21h and infects .COM-files on FindFirst/Next FCB call. It contains the internal text string "DIR by Drunk Avenger [PuKE] x92!".

Home