Virus Database

Macro.Word.Toten

Description Macro.Word.Toten

This is an encrypted Word macro virus. It contains two macros:
Documents: NORMAL.DOT:
AutoOpen README
README DateiSpechern

The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved (DateiSpechern).
Depending on the current date the virus sets password for files.
There are MessageBoxes in the virus, but they are not displayed because of a bug. The texts in MessageBoxes looks as follows:
Makrovirus : Die Toten Hosen(DTH) aus D sseldorf
Heute ist der 02.01.2000. Sie haben den Makrovirus:
Die Toten Hosen
Der Virus wurd von M.N. aus Schwelm (BRD) am 08.06.1996
programmiert. Ich bin ein echter Hosen Fan.
Ha,ha,ha,ha,ha,ha,all
Das kennwort setzt sich zusammen aus Datum oder Zeit und den buchstaben
(TH) oder (TotenHosen) oder (40) oder (DTH)

Check other viruses! Be aware! Use Antiviral Software

Night.2048

Description Night.2048

It is a dangerous memory resident parasitic encrypted virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or opened. Depending on the number of infections it corrupts MBR of the hard drive, beeps, hooks INT 1Ch and displays a rude message.

NightFall.4480

Description NightFall.4480

This is a benign memory resident polymorphic stealth parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are accessed. While installing and infecting this virus uses lot of programming tricks directed against different anti-virus utilities. The virus displays the message:
Invisible and silent - circling overland :
\ N 8 F A L L ///
Rearranged by Neurobasher - Germany
-MY-WILL-TO-DESTROY-IS-YOUR-CHANCE-FOR-IMPROVEMENTS-

Home