Virus Database

Macro.Word.Mercado

Description Macro.Word.Mercado

This is an encrypted Word macro virus. It contains eight macros: AutoOpen, UtilMacro, FerramMacro, ArquivoAbrir, ArquivoSalvar, UtilPersonalizar, ArquivoSalvarComo, FerramPersonalizar.
The virus infects the global macros area (NORMAL.DOT) on opening an infected document and writes itself to documents that are opened, saved or saved with new name.
On May 19th the virus writes to the C:AUTOEXEC.BAT file the commands that format the hard drive, the virus then displays the MessageBoxes:
Alevirus Labs 1997 11/21/97 Virus Extra Hipermercado
Extra = Mais Caro = Caixas sem educa o = Vacas HEHE
Hipermercado Extra 100% Caixas HIV Positivo!!! S>C>S

Check other viruses! Be aware! Use Antiviral Software

Avalgasil.666

Description Avalgasil.666

It is a harmless memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are opened or accessed with FindFirst ASCII DOS-calls. DOS also performs that call while file executing, so the virus also infects the files that are executed. The virus checks the name of the file, and does not infect A*.EXE files. The virus contains the internal text string:
(Avalgasil)666

Avalon.814

Description Avalon.814

It is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. On 31th the virus erase the MBR of the hard drive, hooks INT 1Ch, decrypts and displays the message:
AVALON por OSoft

Home