Virus Database

Macro.Word.Fom.a

Description Macro.Word.Fom.a

This is an encrypted Chinese Word macro virus. It contains five macros: AutoOpen, FOM, ZlockMacro, FileTemplates, ToolsMacro (stealth).
The virus replicates itself when documents are opened (AutoOpen). The infection routine is placed in the FOM macro, it is called by AutoOpen to infect a document/NORMAL.DOT.
The virus displays a MessageBox in Chinese.

Check other viruses! Be aware! Use Antiviral Software

LV.477

Description LV.477

This is a dangerous memory resident parasitic virus. It copies itself into the system memory at the address 99C2:xxxx, and does not fix MCB list, that might halt PC. Then the virus hooks INT 8, 21h and stays memory resident.
The virus infects only COMMAND.COM files when an infected files is executed, and from its TSR-copy when the files are opened. While infecting, the virus uses "Lehigh" method, and the length of the file does not grow.
Under infected system conditions the system speaker plays beeps (INT 10h, ax=0E07h).

Lviv.600

Description Lviv.600

It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed. The virus has a bug while installing memory resident - it does not leaves its copy in separated memory block, but in block of free memory. As a result, when any other program occupies this block, the system halts. The virus contains the ID-string:
Lviv

Home