Virus Database

Macro.Word.Fire

Description Macro.Word.Fire

It is a German specific encrypted Word macro virus. It contains nine macros: AutoExec, AutoOpen, DateiNeu, AutoClose, DateiÖffnen, ExtrasMakro, DateiBeenden, DateiDrucken, DateiSpeichernUnter.
It infects the global macros area on opening an infected document and writes itself to documents on closing and saving. The virus contains the comments:
Rode Du bist schlimmer als Masch!!!!!!!!!
Irrtum!
Ok! Ein Witz mit Rode, Masch und Willer in den Hauptrollen!
Die 3 Sucker sollen erschossen werden!(BITTE! BITTE!)
Auf jeden Fall stehen sie vorm Erschiessungskomando, sagt
Willer: "Seht da! Ein Orkan" Soldaten drhen sich um Erschissung
verschoben! (So'n Pech aber auch)
Nächster Tag, gleiches Spiel! Masch ruft: "Eine Sinnflut! all"
Erschissung verschoben....
Nächster Tag alle stehen wieder an der Mauer, denkt Rode sich,
Mensch ich muss noch was sagen zur Ablenkung!
Ruft er: "FEUER!!!"
ROTFL ;>>>>>

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Concept

Description Macro.Word.Concept

This is the first WinWord virus found "in the wild". The virus contains five macros: AAAZAO, AAAZFS, AutoOpen, PayLoad, FileSaveAs. It infects the files that are SaveAs'ed (FileSaveAs).
There are the text strings in the infected document:
see if we're already installed
iWW6IInstance
AAAZFS
AAAZAO
That's enough to prove my point

and other. The WINWORD6.INI on infected system contains the file:
WW6I= 1

On the first execution of the virus code (i.e. on the first opening of the infected file) the MessageBox appears with digit "1" inside, and "Ok" button.
Macro.Word.Concept.e
This virus contains four macros: Load, AAAZAO, AAAZFS, AutoOpen.
Macro.Word.Concept.f
This is an ancrypted virus. It contains seven macros: K, a678, PARA, SITE, I8U9Y13, PayLoad, AutoOpen.
Macro.Word.Concept.ab
This virus contains three macros:
Documents NORMAL.DOT
MSConcept MSConcept
sAevaSeliF FileSaveAs
AutoOpen nepOotuA

It contains the comments:
Presenting The Microsoft Concept Virus.
Updated by Pyro [VBB] (Author of Word97.NightShade)

Macro.Word.Concept.s
This is Japanese version of standard "Concept", it contains the same set of macros: AAAZAO, AAAZFS, AutoOpen, PayLoad.

Macro.Word.Concept.f

Description Macro.Word.Concept.f

This is a encrypted virus. It contains seven macros: K, a678, PARA, SITE, I8U9Y13, PayLoad, AutoOpen.
On every 16th day of month it replaces '.' to ',' and 'a' to 'e'. On every day of month less then 16th it replaces all texts 'and' to 'not'.
The virus displays a message box with the text:
"Parasite Beta version 0.8!"

or with:
"Your computer is infected with the Parasite Virus, version 1.0!"

Home