Virus Database

Macro.Word.FunFun

Description Macro.Word.FunFun

This Word macro virus contains three macros with random selected names. To access these macros the virus writes their names to the WIN.INI file in section [Intl] in strings Info1, Info2, Info3 (in case of infected system - NORMAL.DOT) or in internal document's variables VirName, VirNameDoc, VirNamePayload (in case of infected document).
To force Word to run its macros the virus assigns them to a random selected key, i.e. the virus takes control only when that key is pressed.
There are several modifications of this virus. They display the MessageBoxes:
"Funfun.a": funfunfun
"Funfun.b": DARKTREMOR
Dark Tremor
Polytest Virus ist Aktiv !!!

"Funfun.b" also drops multipartite virus "Smile".

Check other viruses! Be aware! Use Antiviral Software

CorporateLife.1937

Description CorporateLife.1937

These are not dangerous memory resident parasitic polymorphic viruses. They hook INT 21h and write themselves to the end of EXE files on DOS calls FindFirst/Next FCB. During infection they use old FCB calls. The viruses have bugs and may corrupt the files while infecting them. If there is a sound blaster installed with the Speech driver, the viruses pass to the driver the string to speak it:
"CorporateLife.1929,1937": Fuck Corporat Life.
"CorporateLife.1931,1935,1939,1943,1947,1951,1957,1961,1971":
Mini Cat

The viruses also contain the text strings:
"CorporateLife.1929,1937": $B -=[$$$ Corporate Life $$$]=- P$
"CorporateLife.1931,1935,1939,1943,1947,1951,1957,1961,1971":
$B Mini-Cat 4/96 P$

Corrupt.1033

Description Corrupt.1033

It is not a dangerous nonmemory resident parasitic virus. It searches for COM files, then writes itself to the beginning of the file. When an infected file is executed on a floppy drive, the virus displays the blue and red colored message:
COR-
RUPT
VIRUS

The virus contains the text strings:
C0RrUpT bY CiBeRb0B
*.com

Home