Virus Database

Moose Family

Description Moose Family

These are harmless nonmemory resident parasitic viruses. They search for .EXE files (except "Moose.353", it infects .COM files) and writes themselves at the end of the file. They contain the text strings:
"Moose.353": Moose30 .. *.COM
"Moose.468": Moose31 .. *.EXE
"Moose.631": Moose32 .. *.* *.EXE

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.CMD

Description Macro.Word97.CMD

This is a stealth macro-virus. It contains six macros: AutoOpen, AutoClose, ToolsMacro, FileSaveAs, FileTemplates, and ViewVBCode.
The virus replicates itself when documents are opened, closed or saved with a new name (AutoOpen, FileClose, FileSaveAs). The virus disables the VirusProtection option.
Upon entering the Tools/Macro and File/Tamplates menus, it displays the Balloon:
Help
You do not have permission to do this. Please refer to the instruction
manual for further details.

On October 16, it displays the MessageBox:
Coded By: DarkChasm
CMD (C) DarkChasm

On december 21, it displays the MessageBox:
Christy
I LOVE CHRISTY

Macro.Word97.Colombia

Description Macro.Word97.Colombia

It is a dangerous stealth macro virus. It contains seven macros in one module "NewMacros": AutoOpen, AutoClose, AutoNew, AutoExec, kill, unprotect, engendrar.
It infects the global macros area on opening an infected document (AutoOpen) and infects other documents on opening, creating and closing (AutoOpen, AutoNew, AutoClose).
The virus turns off the Word virus protection (the VirusProtection option). It also disables the Tools/Macro, View/Toolbars menus (stealth).
On each infecting (on automacros executing) it tries to format floppy disk in the A: drive, prints to the status bar the text "Linea <Counter number> Esquema a" and increases its counter by one. If this counter exceed 99, the virus deletes all data on the C: drive by executing DOS command FORMAT.COM in hidden DOS window.
On closing each document the virus displays to the status bar:
Publicidad para Colombia!!

The virus also contains the strings:
COLOMBIA
*** Salvado por Colombia ***
Se salvã el Diskette

Home