Virus Database

Macro.Word.Bukit

Description Macro.Word.Bukit

It is an encrypted macro virus. It contains seven macros: AutoExec, AutoOpen, FileSave, FileSaveAs, ToolsMacro, ShellOpen, FileOpen. The virus infects the global macros area on opening an infected document (AutoOpen) and writes itself to documents that are saved (FileSave, FileSaveAs).
On the 25th of any month it displays the MessageBox:
Selamat
Sekarang adalah tanggal 25, sudahkah anda mengambil gaji?
He..he..Selamat. Kalau bisa, lebih keras lagi kerjanya.
Bravo Bukit Asam !!!

Depending on the system date on FileSaveAs the virus displays the MessageBox:
Non Critical Error
Internal error was occured in module UNIDRV.DLL
Your application may not be work normally.
Please contact Microsoft Product Support.

On entering Tools/Macro menu (macros ToolsMacro) it displays the MessageBox:
Critical Error
Internal error was occured in module UNIDRV.DLL
Please contact Microsoft Product Support.

Check other viruses! Be aware! Use Antiviral Software

Rom Family

Description Rom Family

These are not dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM files that are executed. While installing they display:
"Rom.331": Drive Not Ready.
"Rom.397": ROM BIOS not compatible.

and return to DOS without execution of the host program. While infecting "Rom.397" renames the infected file to "WHY_ME", infects it and then renames back to original name.

Romania.856

Description Romania.856

It is a harmless memory resident parasitic virus. It hooks INT 13h, 28h and on INT 28h calls searches for .COM files except COMMAND.COM and writes itself to the end of the file. The virus contains the text strings:
COMMAND
ROMANIA

Home