Virus Database

Macro.Word97.Shark

Description Macro.Word97.Shark

This macro virus contains nine procedures in module "Switch": AutoOpen, AutoNew, AutoClose, AutoExec, AutoExit, FileSave, First, Second, Third.
It spreads on opening, closing, creating and saving documents. The virus turns off the virus protection and disables "Macro" and "Visual Basic" command bars. The infection procedure copies virus module into all opened templates and also into active document. Then it checks for file "C:PROTECT.SYS", and if it does not exist, the virus exchanges names of two document files in active document folder.
The virus body contains the comments:
>>> Switch - An Israeli Virus <<<
Written by
" The Israeli Shark "
All Rights Reserved
1999(C)

Check other viruses! Be aware! Use Antiviral Software

Gwar

Description Gwar

It is a very dangerous memory resident encrypted and stealth boot virus. It hooks INT 13h and writes itself to the boot sector of diskettes and MBR sector of hard drive that are accessed. The virus copies its TSR copy to the interrupt table. From January 1st till 7th the virus displays a message and erases sectors on the hard drive, the message looks like follows:
Gwar virus by T-2000

Gyro.512

Description Gyro.512

It is a very dangerous non memory resident encipher virus. Then the infected file is started the virus overwrites all .COM-files of current directory. The old contents of the files are not saved and not restored. After it the virus types "Bad command or file name". It also contains the texts: "*.COM", "GURO".

Home