Virus Database

Macro.Word.Foxz

Description Macro.Word.Foxz

This virus contains four macros in documents and eight in NORMAL.DOT:
Documents NORMAL.DOT
AutoClose AutoClose
AutoOpen AutoOpen
Action Action
Foxz ToolsMacro, FileTemplates, ToolsMacro, ViewToolbars,
HelpWordPerfectHelp

The virus infects the global macros area on opening an infected document (AutoOpen). It infects documents that are closed (AutoClose).
It modifies the Windows 95 register information. It contains the comments:
/---------------------------------------------------------------| You know Phardera?,he is X-SLAM member who kick out from SLAM |
| and USE my Name [foxz] for spaming SLAM VIRUS TEAM. |
| His real Name is Anton Reinhard Pardede!, he is a "Mikrodata |
| Crewz"(Computer Magazine in my country), as long as I know, he|
| work on Virus Division on that Magazine. |
| By this virus I want everybody know that "the fucking lamer |
| who Spaming SLAM" is not Me [foxz] |
| Regards, |
| Foxz/NoMercyVirusTeam Leader |
---------------------------------------------------------------/
------------------------------------------------------------
Code Name : WM.FoxZ Gn.III also know as "WinFake"
Author : Foxz [NoMercy]
Origin : Yogyakarta
Dedicated : for the fucking lamer "Phardera" who spaming SLAM
VirusTeam with my Name !
Greetz : Cicatrix, SLAM Crewz and NoMercyVirusTeam Crewz
Group : NoMercyVirusTeam
Effect : Change Windows 9x Register !
Thanks to : CJC, Lucifer, Gurita, CrazyMan, Aurodreph and You
who was see this Text !, see you in my Next virus :)
------------------------------------------------------------
October 30 '97
THANKS FOR SLAMVIRUS TEAM FOR THIS INFO !!! (SLAM mag)

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Claud.b

Description Macro.Word97.Claud.b

Macro.Word97.Claud.b is a macro virus that infects Microsoft word documents and templates. It disables MS Word's virus protection and hides the "Tools/Macros" menu.
The Macro.Word97.Claud.b virus displays the following comment lines at the end of the macro:
'Este es un V macro, Elaborado por c l a u d I o
'Este es el Comienzo de la era de los V Claudio

Macro.Word97.CMD

Description Macro.Word97.CMD

This is a stealth macro-virus. It contains six macros: AutoOpen, AutoClose, ToolsMacro, FileSaveAs, FileTemplates, and ViewVBCode.
The virus replicates itself when documents are opened, closed or saved with a new name (AutoOpen, FileClose, FileSaveAs). The virus disables the VirusProtection option.
Upon entering the Tools/Macro and File/Tamplates menus, it displays the Balloon:
Help
You do not have permission to do this. Please refer to the instruction
manual for further details.

On October 16, it displays the MessageBox:
Coded By: DarkChasm
CMD (C) DarkChasm

On december 21, it displays the MessageBox:
Christy
I LOVE CHRISTY

Home