Virus Database

Macro.Word.SwLabs

Description Macro.Word.SwLabs

This Word macro virus contains seven identical macros: AutoOpen, Skammy, AutoNew, AutoExit, FileOpen, AutoClose, FileClose.
It replicates on all calls listed above. Because of an error(?) it disables files opening - FileOpen does not display the Open File dialog.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Wannabe

Description Macro.Word.Wannabe

This is an encrypted Word macro virus. It contains one macro AutoOpen and replicates itself when documents are opened. Only the files get infection that are listed in the recently used file list, i.e. the virus does not copy itself to global macros area.
The virus' actual code is placed in document's variable, and AutoOpen macro gets that code from variables, creates new macro HONOR, inserts code into it, executes and then deletes. The HONOR macro looks for documents in file list and infects them.
The virus contains the comments:
After FutureNot, AntiFWIN, SlovakDictator and the NB Virii's
comes now my contribution against the av-scanners.
HERE IS >>>>> HONOR <<<<<

Macro.Word.Want

Description Macro.Word.Want

This is Chinese Word macro virus. It contains 5 macros: AutoOpen, dom, free, ToolsMacro, want. The virus replicates itself on opening documents.
Starting from 15th of any month, in case of an error in macros the virus writes to the C:AUTOEXEC.BAT file the command that will format the hard drive:
FORMAT C:/S/U/V:VFS>NUL

The virus also creates the files OUT.COM, DOM.COM, KOS.COM that are infected by viruses "Ph33r", "Hare.7786", "Natas.4746" and copies these files with the names C:MSAV.COM, C:KILL.COM, C:GMOUSE.COM. The virus also inserts calls to these files into the C:AUTOEXEC.BAT file.

Home