Virus Database

Macro.Word97.Gipsy

Description Macro.Word97.Gipsy

It contains six macros in one module "GIPSY": AutoOpen, Payload, FileSaveAs, FilePrint, ViewVBCode, ToolsMacro. It infecting the global macros area on opening an infected file. It infects other documents on saving them with new names.
The Payload macro depending on the system random counter either displays the Balloon:
The Gipsy Virus:
Copy me, I like to travel

For appends to the C:AUTOEXEC.BAT the commands that write to the C:COMPUTER.V file the string "Help me I'm sick":
@echo off
echo Help me I'm sick >>C:Computer.V

On December 24th the virus displays the Balloon:
BiologicBeast Virus:
Mary Christmasall don't work at this day

Check other viruses! Be aware! Use Antiviral Software

BAT.IBBM.generic

Description BAT.IBBM.generic

These are not dangerous script viruses. They are created with the constructors: The Incredible Batch Bug Maker and The Super Appending Batch VCK. The viruses search for .BAT files in current directory, into directories from a variable %PATH% and write themselves to the beginning or to the end of file. While infecting they use the host file in the root directory of disk C. Generated viruses contains the label:
::**** HOST ****

BAT.Mtr.1429

Description BAT.Mtr.1429

This is a very dangerous nonmemory resident BAT virus. It searches for .BAT files in the root directories on drives from C: till G:, then writes itself to the beginning of the file. The virus leaves DONE.BIN file on these drives, and uses it as a "already-infected" identificator.
After six executions the virus deletes all files in C:DOS, C:NC, C:MOUSE, C:RUS as well as COMMAND.COM.
The virus contains the text:
"Mind TRaining" by Dr.MORGAN

Home