Virus Database

Macro.Word97.Unseen

Description Macro.Word97.Unseen

This is a very dangerous polymorphic macro-virus. It contains one macro Document_Open and infects documents and global macros area on document opening. Depending on the system time and random counter, the virus corrupts the first two sectors on the C: drive.
The virus has quite an unusual stealth routine. When a document is opened, the virus moves its code from the macro area to the documents' variables, and replaces its code with a short macro program Document_Close that moves the virus code back to the macro area from the document's variables when the document is closed. As a result, the virus is invisible by using Word tools - when Word opens a document, the virus hides itself in the variables. When a document is closed, the virus restores its code, and the document on the disk stays infected.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Dude

Description Macro.Word.Dude

This is a very dangerous encrypted macro virus. It contains four macros: AutoOpen, FileSaveAs, ToolsMacro (stealth), FilePrintDefault. The virus infects the global macros area (NORMAL.DOT) on opening an infected document and writes itself to documents that are saved with new name.
On April 4th the virus format the hard drive and displays the MessageBox:
Its c++l DuDe's Birthday!!

Macro.Word.Dust

Description Macro.Word.Dust

This is an encrypted macro virus. It contains four macros: AutoExec, AutoOpen, FileSaveAs, STARDUST.
The virus infects the global macros area (NORMAL.DOT) on opening an infected document. On Word startup the virus infects recently used documents listed in FileList. The virus also writes itself to documents that are saved with a new name.
The virus inserts into documents the text:
StarDustMemories

Home