Virus Database

Macro.Word97.Smac

Description Macro.Word97.Smac

This is a polymorphic macro-virus. It infects the global macros area on opening an infected document, and spreads itself to documents that are closed. The virus was named after one of its internal variables - "Smac".
The virus has stealth abilities, and on entering the ViewVBCode menu, it displays the message:
Illegal function in module 0xCB15C00

The virus contains six macros in one module "cb4111": AutoOpen, AutoExec, ViewVBCode, Do_The_Thing, AutoExit. The virus also has the Morph function that is used in virus polymorphic engine.
While infecting the NORMAL.DOT (global macros area), the virus also creates the infection AutoClose macro in there.
The virus contains the comments:
ThE wEiRd GeNiUs is back!
Greetings to the Codebreakers, VicodinEs & Lord Natas and to ALT-F11
Thanks for the cb4111 guide.
Until the next bug, greetings, WG

Check other viruses! Be aware! Use Antiviral Software

Backdoor.Win32.Livup.c

Description Backdoor.Win32.Livup.c
This program provides a remote malicious user with access to the victim machine. It also makes it possible to download files via the Internet to the victim machine without the knowledge or consent of the user. Installation Once launched, the backdoor creates a file named "msstart.exe"all

Backdoor.Win32.Nanspy.f

Description Backdoor.Win32.Nanspy.f
This backdoor program is written in Delphi, and packed using UPX. The file is 211520 bytes in size. Installation The backdoor copies itself to the system directory as spools.exe. It registers this file in the system registry to ensure that the program is launched each time Windows is rebootedall.

Home