Virus Database

Macro.Word.Niki

Description Macro.Word.Niki

This encrypted virus contains six macros: AutoExec, AutoOpen, FileApri, FileSalvaConNome, StrumMacro, NiKI. The virus infects the global area on AutoOpen and writes itself to the documents on FileApri (FileOpen?) and on FileSalvaConNome (FileSaveAs?).
The virus in some way modifies the Tools/Customize menu. Depending on the system time it runs its trigger routine (macro NiKi) that in some way modifies the current document and deletes *.DOC and *.DLL files in C:MSOFFICE and C:WINDOWSSYSTEM directories.

Check other viruses! Be aware! Use Antiviral Software

Burma Family

Description Burma Family

These are dangerous not memory resident overwriting viruses. They search for first .EXE- and first .COM-file of current and DOS directories and overwrite them. On infection these viruses (except "Burma.409") manifest themselves by a video effect, then they display the messages:
"Burma.442": [Tempest - _]
"Burma.563,756": Reading system configuration, please wait.
SwizzleStyxx!

The viruses contain the internal texts also:
"Burma.442": Rangoon, Burma
"Burma.563,756": D_a_r_k_A_v_e_n_g_e_r

"Burma.409" hits files with extension *.COM, *.EXE, *.ZIP, *.DAT, *.SYS, *.OVL. It erases the disk sectors, it also contains the internal text string:
Tempest - _ Of LuxemburgVaginal Discharge

[Note: "_" = high-ASCII chars, cannot be displayed in simple HTML]

Buttugly.552

Description Buttugly.552

PS-MPC family. It's a not dangerous not memory resident parasitic encrypted virus. It searches for .COM-files of subdirectories pointed in PATH string and writes itself at their ends. Sometimes it appends to the files the text string:
Fool. Dolt. Fuck You! HaHah. You Limp Cock! Damn! Your Butt-Ugly.

It contains the internal text strings also:
*.COM
PATH=
by Primal Fury

Home