Virus Database

Macro.Word97.Greetz

Description Macro.Word97.Greetz

This virus contains three modules: KidChaos, SLAM, and Greetz, and replicates upon document opening. Depending on the system's random counter, it displays the following list Balloon:
Word97.Greetz by Kid Chaos [SLAM]
Greetings to SLAM friends:
Virtual Daemon
Aurodreph
CyberYoda
Darx Kies
Forms
rAiD
Shaitan
Stealth Warrior
Trigger
Yesna

Upon entering Help/About beginning on the 13th of any month, the virus displays the following MessageBox:
About WM97.Greetzall :-)
====> (c) 1998 by Kid Chaos <========> of SLAM Virus Team <====
Hey Bill Gates, do you like other cake on your face? :-D

Upon entering the macro-editing menus, the virus, depending on the current date, sets passwords for the current document:
Menu item Trigger day Password
File/Templates 13 KidChaos
Tools/Macro 1 WeRoqs
Tools/Macro/WordBasicEditor 20 SLAM98

Check other viruses! Be aware! Use Antiviral Software

Leonard.1179

Description Leonard.1179

These are harmless memory resident encrypted parasitic viruses. They hook INT 21h and write themselves to the end of COM and EXE files that are accessed. While infecting a file the viruses temporarily rename it to TMP01431.$$$. The viruses do not manifest themselves in any way. They contain the text:
(c) Leonard. Constanta, Romania.

Leonardo.2085

Description Leonardo.2085

It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed. The virus deletes the anti-virus databases: ANTI-VIR.DAT, FINGERP.VVF, FILES.VVL, CHKLIST.MS, *.CRC. Depending on the system time the virus displays the message:
This is Leonardo - another virus Ninja Turtle
Press any keyall.

The virus also contains the text:
Origin :Slovakia (not Hungaria or Austria)

Home