Virus Database

Macro.Word.JackWild

Description Macro.Word.JackWild

Text (c) Michal A. Egler
This is a dangerous macro virus written in Poland. It was found in the wild in the city of Poznan. The virus contains 11 encrypted macros: Utils, AutoNew, FileNew, AutoExec, AutoOpen, FileExit, FileSave, AutoClose, FileSaveAs, ToolsMacro, FileTemplates. The virus code contains many comments. It looks like a beta version of the virus and contains implemented debug functions. In debug mode the virus displays MessageBoxes with error messages and informations about current action. Randomly the virus presents special effects:
SetProfileString "windows", "Programs", "com bat"
SetPrivateProfileString "boot", "shell", Chr$(255) + "progman.exe", " system.ini "
SetPrivateProfileString "ScreenSaver", "Password", " z'*Ge?OnI+*Ku ", "control.ini"
Shell Environment$("COMSPEC") + "/c" + "setver win.com 3.0", 0
SetProfileString "windows", "SwapMouseButtons", "yes" SetProfileString "windows", "MouseTreshold1", "0"
SetProfileString "windows", "MouseTreshold2", "0"
SetProfileString "windows", "MouseSpeed", "0"

Changes colors of many elements in Windows.
The virus also contains the text:
Colors 95 modified by Jack Wild

Check other viruses! Be aware! Use Antiviral Software

NED.Nukehard

Description NED.Nukehard

This is a dangerous non-memory resident parasitic polymorphic virus. It searches for COM files, and writes itself to the end of the file. In December, it formats the hard drive sectors, and then reboots the computer. It contains the text strings:
*.COM
IT'S HARD. SMAUG REIGNS SUPREME AS THENEW FORCE IN VIRUS WRITING.
SMIRK. SMIRK. POOF!

NED.Tester

Description NED.Tester

This is a benign non-memory resident parasitic polymorphic virus. It searches for COM files, and writes itself to the beginning of the file. It displays the message "Test virus successful!" before infection. It also contains the text strings:
*.COM
[VCL]

Home