Virus Database

Nazgul Family

Description Nazgul Family

These are harmless nonmemory resident parasitic viruses. They search for .COM files, then write themselves to the beginning of the file. The viruses contain the texts:
"Nazgul.209": *.COM
"Nazgul.266": *.COM Nazgûl

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Stealph

Description Macro.Word.Stealph

This virus contains two macros:
Documents NORMAL.DOT

CSF FileOpen
AutoOpen CS

It replicates on documents opening. The documents->NORMAL.DOT infection routine does not have replicating instructions in its code. Instead of ordinary ways of infection, it creates the temporary CyberShadow macro, fills it with instructions of replication that are stored in virus text constants, executes and then deletes.
The virus contains the comments:
Stealth Wishes by CyberShadowall
Thanks to SGWW !

Macro.Word.Stress

Description Macro.Word.Stress

This is an encrypted Word macro virus. It contains three macros: AutoOpen, FilePrint, FileSaveAs. The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved with new name or printed (FilePrint, FileSaveAs).
The virus removes all menus that allow to check macros. On printing a document the virus not only infects it, but also removes all text from the document, disables re-do (EditUndo) and then prints the text:
STRESS '97
Special for my love by
The Free Hackers
Viroright (C) 1997 Internation Virus Research
If you have bugs, please call me and don't stress for it!
I will back laler!

The virus then displays the MessageBox:
[IVR] - Internation Virus Research
You are STREZZ now, I'm sorry for it!

Home