Virus Database

Macro.Word97.Remplace

Description Macro.Word97.Remplace

This macro virus contains seventeen macros in one module "Akrnl": Akrnl, AutoExec, AutoNew, AutoPrint, FileNew, FileClose, FileExit, autoOpen, AutoExit, AutoClose, ToolsMacro, FileTemplates, ViewVBCode, RandomRemplace, Remplace, Sauve, DelVir.
It infects the global macros area on opening an infected document (AutoOpen) and infects other documents on opening, closing, printing or creating (FileOpen, AutoPrint, FileClose, FileNew). Before infecting the virus removes all modules from infecting document and global macros area.
The virus turns off the Word virus protection (the VirusProtection option).
On opening infected document if day of month is above 22, the virus with probability about 27% replaces text "donc," with one of following strings:
ainsi, si j'en crois ce que mon incompŠtant de professeur me dit,
ainsi, mon chat a perdu ses dents. De plus,
ainsi, selon ma grand-m¨re,
ainsi, la mati¨re du cours est plate. De plus,

Check other viruses! Be aware! Use Antiviral Software

Croatia_II.560

Description Croatia_II.560

It is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed. The virus deletes the CHKLIST.MS file, if it exists. On February 12th it erases the hard drive sectors and displays the message:
Croatia must be free !
(c) 1995 by Inquisitor.

Crocodiles.1592

Description Crocodiles.1592

It is a very dangerous memory resident parasitic virus. While executing an infected program the virus searches for the COMSPEC string, and infects the command interpreter (COMMAND.COM). While executing an infected command interpreter the virus hooks INT 21h and then writes itself to the end of COM and EXE files (except SCAN.EXE) that are executed.
Depending on its generation the virus also hooks INT 8 (timer) and manifests itself with some sound effect. The virus also calls some other effects and erases the disk sectors, but that code is corrupted, and the computer halts. The virus contains the text string:
CROCODILES

Home