Virus Database

Macro.Word.Horn

Description Macro.Word.Horn

This virus contains two macros: AutoOpen, LittleHorn. It writes itself to the global macros area on opening an infected document (AutoOpen). The virus infects documents on pressing the "e" key - to do that it intercepts keyboard events. The virus does not manifest itself in any way.

Check other viruses! Be aware! Use Antiviral Software

Burger.Pirates.609

Description Burger.Pirates.609

This is a dangerous, non-memory resident parasitic overwriting virus. It writes itself to the beginning of COM files of the current drive.
It erases the disk sectors and formats the disks. It contains the internal text string:
1989 / 1990 Software Pirates - Fast Serial - Portugal *.com *

Burglar family

Description Burglar family

These are not dangerous memory resident parasitic viruses. "Burglar.1365" is an encrypted virus. They hook INT 21h and write themselves to the end of EXE files that are accessed. The viruses check the name of the file, and do not infect the file if its name contains "V" or "S" symbols, or begins with: "CL", "HW", "TB", "F-", "WC", or "TK", according to the string (two letters per name):
CLHWTBF-WCTK

Several versions ("Burglar.1150,1365") also search for EXE files and infect them when DOS functions GetDiskSpace or DeleteFCB (AH=13h,36h) are called. The viruses search for EXE files in the current directory only.
"Burglar.1365" also drops a silly nonmemory resident overwriting virus "SillyOC.100".
The viruses depending on the system timer display the messages:
"Burglar.820": BURGLAR
"Burglar.824": BURGLAR!
"Burglar.833": BURGLAR/Type D
"Burglar.877": BURGLAR/Type E
"Burglar.1004": BURGLAR/Type F
"Burglar.1050": BURGLAR/G by SVS
"Burglar.1150": Burglar/H
"Burglar.1365": Burglar/I

The viruses also contain the text strings:
"Burglar.777": Burglar
"Burglar.1004": [_THE KNIGHT OF A DOLL - PART I_]
"Burglar.1050": [Yally livesallsomewhere in Mind]
"Burglar.1150": AT THE GRAVE OF GRANDMA...
"Burglar.1365":
Burglar VIRUS (Type I/Last Ver) with Miny1.100 9192/3/12-4/1
by Corean Virus' leader : KOV (Knight Of Virus).

Home