Virus Database

Macro.Word.Wmvh

Description Macro.Word.Wmvh

This virus contains two macros in documents (AutoOpen, BieDEMO) and five macros in NORMAL.DOT (AutoNew, AutoOpen, AutoExec, AutoClose, BieDEMO).
It infects the global macros area on opening an infected document (AutoOpen). The documents get infection on AutoNew, AutoOpen, AutoClose.
On October 10th the virus displays the MessageBox:
BieDEMO Macro Virus by WMVH
This is a Demo of Bie's WMVH

The virus contains the comments:
REM Bie's Word Macro Virus Hamburger Ver.beta
REM This Macro Virus Made from Bie's WMVH
REM Bie's E-Mail: bie111@hotmail.com
REM 2/09/1997

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Shuffle

Description Macro.Word.Shuffle

This is a stealth Word macro virus. It contains one macro in documents (AutoOpen) and four macros in NORMAL.DOT (XXXXX, FileSaveAs, ToolsMacro, FileTemplates).
The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved with new name (FileSaveAs). The virus infects the documents in usual way, while infecting the NORMAL.DOT the virus deletes all macros in there, minimizes the Word window, and copies its macros string-by-string to the global macros area.

Macro.Word.Sidor

Description Macro.Word.Sidor

This macro virus contains five macro in documents: AutoOpen, FileClose, FileTemplate, mir, ToolsMacro (stealth). In NORMAL.DOT It contains seven macros: AutoExec, ToolsMacro, FileTemplate, FileSave, FileSaveAs, fucker, sokker.
The virus infects the global macros area on opening an infected document and copies itself to other documents on saving or saving with new name. While infecting the virus uses anti-heuristic trick: it creates four temporary macros, writes infection routines to there, executes these macros and then deletes them.
The virus contains the comments:
Write by Sidorov Konstantin Matveevich, 73 years old, der. Vioshki,
Moscowskaya obl.
Sorry me, old grandfather, for some errors

Home