Virus Database

Macro.Word.Spooky

Description Macro.Word.Spooky

This is an encrypted virus. It contains nine macros: spooky, autoexec, autoopen, dateiöffnen, extrasmakro, dateidrucken, dateidokvorlagen, DateiSpeichernUnter, dateidruckenstandard.
If current seconds are greater than 55 the virus add text "Word.Spooky" to the end of documents while printing them. Depending on the current date the same string is printed to the status bar.
On extracting a macro (extrasmakro) the virus displays the message and waits for "ykoops" password:
Diese Option wurde von Spooky gesperrt, Sie müssen ein Passwort eingeben:

If password is not entered, the virus terminates that macro and displays MessageBox:
Sie haben das falsche Passwort eingegeben

Check other viruses! Be aware! Use Antiviral Software

Ienez.1428

Description Ienez.1428

It is a dangerous memory resident encrypted parasitic virus. It hooks INT 17h, 21h and writes itself to the end of EXE files that are accessed. Depending on the system timer it overwrites the MBR of hard drive with the string:
IENEZ II 29-9-93 VETO !!!

and erases the disk sectors. Depending on its internal counter it changes the digits while printing. This virus also contains the text string:
IENEZ II (c) DEATHMAN 1993

Ieronim.512

Description Ieronim.512

These are not dangerous memory resident parasitic viruses. They hook INT 21h and INT 8, or INT 9, or INT 1Ch depending on the virus version. They infect .COM files (except COMMAND.COM) that are executed. Depending on their versions these viruses write themselves to the end, or the beginning of the file. "Ieronim.1166,2048" write themselves to the end of EXE files.
These viruses display the messages:
+--------------------------------------+
ƒ Mulier pulchra est janua diaboli, ƒ
ƒ via iniquitatis,scorpionis percussio.ƒ
ƒ St. Ieronim ƒ
+--------------------------------------+
+--------------------------------------+
ƒBeautiful woman is a devil's entrance,ƒ
ƒa way of misfortunes,a scorpion's biteƒ
ƒ St. Ieronim ƒ
+--------------------------------------+

They also contain the string "command".
"Ieronim.Condom" depending on the system timer starts to poetry: it displays a funny poem "Le voyage de condom" in Russian.

Home