Virus Database

Macro.Word.Percent

Description Macro.Word.Percent

This is a Chinese encrypted Word macro virus. It contains four macros: Joke, AutoExec, AutoOpen, ToolsMacro.
On opening a document (AutoOpen) the virus creates the temporary "Back" macro, fills it with its infection routine that reads from document's AutoText, executes (infects the NORMAL.DOT) and deletes. The same for document infection.
Depending on system random counter and day of week the virus displays the message (but does not format the disk):
Formatting C: . . .
Formatting C: <percents 1 - 99>% completedall

The virus then displays the MessageBox:
Format C:Hard disk C: format complete.
You must reboot to take effect !

On pressing "Ok" the virus exits Windows.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Fom.a

Description Macro.Word.Fom.a

This is an encrypted Chinese Word macro virus. It contains five macros: AutoOpen, FOM, ZlockMacro, FileTemplates, ToolsMacro (stealth).
The virus replicates itself when documents are opened (AutoOpen). The infection routine is placed in the FOM macro, it is called by AutoOpen to infect a document/NORMAL.DOT.
The virus displays a MessageBox in Chinese.

Macro.Word.Formater

Description Macro.Word.Formater

The virus contains five macros: AutoExec, AutoOpen, DLLError, ToolsMacro, ToolsCustomize. It replicates on opening documents.
In the WIN.INI file in the [Formater] section in the Activated string the virus keeps the counter that is increased on each loading Word with infected NORMAL.DOT.
On starting Word on August 20 the virus creates a new document and runs the text there:
Word Macro Virus Formater!!! by Formater . This is my birthday!
I'm <1998 minus current year number> years old! Don't try to find meall

On entering the Tools/Macro or Tools/Customize menu the virus displays the MessageBox:
Formater
Cannot find FORMATER.DLL. Windows
needs this file to run winword.exe

On entering the same menus on August 20 the virus displays the InputBox and waits for "Formater" input, otherwise it exits the Windows:
Formater
I'm a Word Macro Virus! I said: 'Don't try to find me!!!' You didn't
listen to me! Enter my name, or I will quit from Word without saving
documents! (do not press Cancle)

The virus contains the comments:
_____ ___ ____ __ __ _ _____ _____ ____
| ___/ _ | _ | / | / |_ _| ____| _ | |_ | | | | |_) | |/| | / _ | | | _| | |_) |
| _|| |_| | _ <| | | |/ ___ | | | |___| _ <
|_| \___/|_| \_\_| |_/_/ \_\_| |_____|_| \_The Word Macro Virus by Formater '98

Home