Virus Database

Ass.476

Description Ass.476

This is a very dangerous memory resident parasitic virus. It copies itself into Interrupt Vectors Table, hooks INT 21h, and writes itself to the end of COM-files that are executed. On May 31st, the virus corrupts the boot sectors of the floppy disks, and on December 25th, it erases MBR of the hard drive. The virus contains the text string:
Asshole

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Emperor.a

Description Macro.Word.Emperor.a

This is a encrypted Chinese macro-virus that replicates itself only under the Chinese Word version.
This virus contains five macros: AutoOpen, Emperor, VirusMessage, FileTemplates, ToolsMacro (stealth). Upon opening an infected document (AutoOpen), the virus infects all current Word windows (i.e., all files that are edited). Upon entering the Tools/Macro menu, the virus erases all macros in NORMAL.DOT, and summons AutoOpen (infection routine).
Depending on the random counter and the day of week, the virus displays the following in the MessageBoxes (partly in Chinese):
The First Emperor Ver 1.00
The First Emperor Ver 1.00
SSCAN,GSCAN,MacroTrap

Macro.Word.Employ

Description Macro.Word.Employ

This virus contains only one macro "autoopen" and replicates itself on opening documents.
Since July 14th 1997 depending on the system random counter it hides the status bar, scroll bars, install blue bacround or etc. The virus also inserts into documents the text:
Les employ s les plus incomp tents sont syst matiquement promus aux postes
o· ils se r v lent le moins dangereux: l'encadrement.

Home