Virus Database

Macro.Word97.Cipher

Description Macro.Word97.Cipher
The virus contains seven macros in one module "Cipher": AutoNew, AutoOpen, AutoClose, cphrdoc, hideb, WindowsDirectory, and spreadIB. It replicates upon document creating, opening and closing (AutoNew, AutoOpen, AutoClose).
Depending on the system random counter, the virus sets the password "MisterCipher" on a current document or displays the following MessageBox:
Time Signal
I say to you that it's
It's too late. You must finish to work before next time!!!
Bye,Bye

On Friday the 17th, on the 31st of the month (excluding those with less days), and on the 25th of April, the virus drops a file infected by the the "Italian.578" DOS virus.
Upon closing documents on the 25th of April, or depending on the system random counter, the virus encrypts the text in the current document and displays the following MessageBox:
I want to say to you: L'Italia una ed indivisibile e c' la morte per
chi la divide!!!!!all..
Are you angry because you lost your document?+; Kill Bossi, the fault is his
Mister Cipher reigning

Check other viruses! Be aware! Use Antiviral Software

SatanBug.a

Description SatanBug.a

It is a harmless memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or opened. It contains the text strings:
Satan Bug virus - Little Loc
COMSPEC=COMMAND.COM

SatanBug.1568
It is a harmless memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of COM files that are executed. Depending on the system date it disinfects the host file.
SatanBug.FruitFly
It is a dangerous nonmemory resident parasitic polymorphic virus. It searches for COM files of the current directory and directories of PATH string, and infects them. It deletes VS.VS and CHKLIST.CPS files. It also contains the text strings:
PATH=
VS.VS
CHKLIST.CPS
????????.COM
Fruit Fly virus - Little Loc
Hacker4Life
Hackers In ThE Mist

Satanic.1345

Description Satanic.1345

This is a very dangerous memory resident parasitic virus. It hooks INT 21h, and writes itself to the beginning of COM files that are executed or opened. On Fridays, it erases the disk sectors with the text:
Satanic Warrior

It also displays this text.

Home