Virus Database

Macro.Word.Giggle

Description Macro.Word.Giggle

This is an encrypted macro-virus containing three macros: AutoOpen, FileSaveAs, OhYes. It replicates itself when documents are opened or saved with a new name. It identifies itself in documents according to the document variable "Giggle=OhMyGod".
On each day except Tuesday, the virus, depending on the random system counter, erases the files on the C: drive or replaces the strings:
By - It's Not Monday any more
^d - Error!
B - x
^# - #
^w - x

After deleting files, the virus displays one of the MessageBox'es:
Space Virus More space for the user
Sorry Self-destruct is in action
Windy
An error has occured you must re-start windows
This is the OBAY Virus

Check other viruses! Be aware! Use Antiviral Software

Ekoterror

Description Ekoterror

It's a memory resident dangerous multipartite stealth virus. On execution of infected file it writes itself into MBR of hard drive (it occupies the sectors from 0/0/1 till 0/0/5 - track/head/sector) and returns the control to the host program. On loading from infected sector it hooks INT 8, 13h, then by using INT 8 it hooks INT 21h and writes itself at the beginning of the .COM-files on their creating.
Sometimes it decrypts and types:
EkoTerror (C) 1991 ATK-toimisto P.Linkola Oy
Kovalevysi on poistettu käytöstä luonnonsuojelun nimessä.
Vihreässä yhteiskunnassa ei saa olla ydinsähköllä toimivia kovalevyjä.

and then hangs up the computer. It infects incorrectly some types of hard drives, DOS hangs up on loading in these cases.

ELCN.374

Description ELCN.374

These are not dangerous nonmemory resident parasitic viruses. They search for COM files, then write themselves to the beginning of the file. "ELCN.374" does not infect the COMMAND.COM files. The viruses display the messages in Russian. They also contains the texts:
"ELCN.374": COMMAND.COM
"ELCN.424": Bryansk ELCN

Home