Virus Database

Macro.Word.KillProt

Description Macro.Word.KillProt

This is an encrypted macro virus. It contains four macros: AutoOpen, FileSaveAs, FileOpen, ToolsMacro. It infects global macros area on AutoOpen and ToolsMacro, documents get infection on FileOpen and FileSaveAs.
The virus creates the "Count=" parameter in "Infector" section in system profiles and increases its value on each FileSaveAs call. On every tenth saving a document with new name the virus sets the password for that document:
WhatTheHell

On any other saving the virus converts document to template. On each AutoOpen the virus deletes the macros AutoExit, InstVer, ShellOpen (ScanProt-specific macros).

Check other viruses! Be aware! Use Antiviral Software

Atul.1351

Description Atul.1351

It is not a dangerous nonmemory resident parasitic virus. It searches for EXE files, then writes itself to the end of the file. Under DOS 6.22 the virus also patches the COMMAND.COM file and inserts the virus code into the file, infected in such way COMMAND.COM is not recoverable and should be replaced from backup.
On December 27th the virus displays the text:
Happy Birthday, VAISHALI
With love from LOVER

The virus also contains the text strings:
ATUL
LATUL
COMMAND.COM
Refer DOS user manual

Aurea.653

Description Aurea.653

These are dangerous, not memory resident parasitic encrypted viruses. They search for .COM-files (except COMMAND.COM) of current directory and C:DOSdirectory and write themselves at their ends. On March, 1st they display the message:
I'm sorry, you lost something because of AUREA

and then erase the disk sectors and halt the computer. On 1st day of every month they erase one random selected sector.

Home