Virus Database

Macro.Word.Vicissitator

Description Macro.Word.Vicissitator

This is a polymorphic Word macro virus. It contains only one macro in infected documents - FileSave, but while infecting the system it creates two macros - FileSave and ToolsMacro (stealth). The virus replicates itself when documents are saved (FileSave). While infecting the virus creates the Vicissitator macro, copies its code to there and edits it (polymorphic engine). The virus then copies to the document the result macro with name FileSave.
While infecting NORMAL.DOT the virus writes the text to the ToolsMacro macro:
You have been Infected by the Vicissitator Macro Virus.
(C)1997 CyberYoda A Member of the SLAM Virus Team

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Cleanup

Description Macro.Word.Cleanup

This is a Portuguese encrypted macro virus. It contains only one macro AutoOpen and replicates itself on opening documents.
In January in 2000 the virus erases all files on the C: drive, but cancels erasing if any of files presents on disk:
C:DOSMASTERPC.TXT
C:WINDOWSMASTERPC.TXT
C:WINDOWSSYSTEMMASTERPC.TXT

While deleting the virus displays the messages:
SEARCHING TEMPORARY FILE TYPE all
PROBABLE TEMPORARY FILE FOUND
Delete this file
DELETING FILE...
Files Deleted. Keep your Hard Drive cleaned !

Macro.Word.Clock

Description Macro.Word.Clock

This is an encrypted virus. It contains eleven macros: Action, AutoExec, AutoOpen, DateiÖffnen, ExtrasMakro, DateiSchließen, DateiSpeichern, DatumUndUhrzeit, DateiDokVorlagen, DateiAllesSpeichern, DateiSpeichernUnter.
The virus infects the system while opening an infected file (AutoOpen) and infects the files that are opened or saved.
In current day number is above than 25, year is above than 1996, seconds are above than 39, the virus displays the message box containing current date and time.

Home