Virus Database

Neuro.3100

Description Neuro.3100

It is a dangerous memory resident polymorphic and stealth parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are accessed. The virus does not infect the anti-viruses SCAN, NAV, F-PROT, SHIELD and corrupts some file (anti-virus?).
The virus contains the text strings:
comCOM
[Neuromorphosis]
ANAVOTLDEManavotldem

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Joxzin

Description Macro.Word.Joxzin

This is a Word macro virus. It contains four macros in document: AutoClose, AutoOpen, NoMercyE, NoMercyI, and two more macros in NORMAL.DOT: FileTemplates, ToolsMacro (stealth).
The virus replicates itself when documents are opening or closing. It contains the set of instructions for both Italian and English Word. At the beginning of each macros there is the remark:
VirusName : WM. Joxzin
Author : Foxz [NoMercy]
Origin : Yogyakarta, Indonesia
WordVersion : Italian and English
Dedicated to: Italian and Indonesian Macro Viruses Creator

Macro.Word.Junk.a

Description Macro.Word.Junk.a

These are stealth and polymorphic Word macro viruses. They contain two macros in infected documents (AutoClose, NoMercy) and three macros in the NORMAL.DOT (AutoClose, ToolsMacro, FileTemplates).
On closing an infected document (AutoClose) they infect the global macros area (NORMAL.DOT), while infecting they copy the NoMecry macro to macros ToolsMacro and FileTemplates. The documents get infected also on closing. While infecting the virus changes the code of AutoClose macro (polymorphism) - the virus replaces the strings within that macro with other strings.
On 11th of any month the viruses display the MessageBoxes:
"Junk.a":
WELCOME AGAIN!
Hi you!! my name is Junkies! (c)NoMercy 1997

"Junk.b,c":
(c)NoMercy
The Junkies was back!

Home