Virus Database

Macro.Word97.Temple

Description Macro.Word97.Temple

This virus does not manifest itself in any way. It contains four modules:
Documents NORMAL.DOT
AutoOpen TempAutoOpen
TempAutoExec AutoExec
TempFileSave FileSave
TempFileOpen FileOpen

The virus infects the global macros area (NORMAL.DOT) on opening an infected document and writes itself to documents that are opened or saved.

Check other viruses! Be aware! Use Antiviral Software

Necros.1164

Description Necros.1164

It is not a dangerous memory resident polymorphic virus. It hooks INT 1Ch, 21h and infects COM and EXE files. This virus writes itself to the beginning of the COM files, and infects EXE files in companion way: the virus creates the .COM file with the name of .EXE file.
On November, 21th the virus beeps and displays:
Virus V2.0 (c) 1991 Necros The Hacker.
Written on 29,30 June in Tralee, Co. Kerry, Ireland.
Happy Birthday, Necros!

It also contains the text:
Virus V2.0 [FrIEND]

NED-based viruses

Description NED-based viruses

NED (Nuke Encryption Device) is a polymorphic generator that creates a decryption routine and encrypts the virus body, then the virus saves this part of code to the file. This generator contains the text strings:
[NuKE] Encryption Device v1.00
(C) 1992 Nowhere Man and [NuKE]

NED.Nukehard
This is a dangerous non-memory resident parasitic polymorphic virus. It searches for .COM files, and writes itself to the end of the file. In December, it formats the hard drive sectors, and then reboots the computer. It contains the text strings:
*.COM
IT'S HARD. SMAUG REIGNS SUPREME AS THENEW FORCE IN VIRUS WRITING.
SMIRK. SMIRK. POOF!

NED.Tester
This is a benign non-memory resident parasitic polymorphic virus. It searches for .COM files, and writes itself to the beginning of the file. It displays the message "Test virus successful!" before infection. It also contains the text strings:
*.COM
[VCL]

Home