Virus Database

Perfume Family

Description Perfume Family

These are very dangerous memory resident parasitic viruses. They write themselves to the end of the .COM files. Being executed these viruses infect the COMMAND.COM file, then they hook INT 21h, stay memory resident, and then they infect the files that are executed. While installing into the memory they do not fix MCB list, that may halt PC.
Sometimes they erase the random sectors on the floppy disk. On the 80th attempt to infect already infected file the virus runs a dialogue, it displays:
Bitte gebe den G-Virus Code ein :

and waits for "4711" input. If this string is entered, the virus displays:
Tut mir Leid !

"Perfume.731" also contains the text:
G-VIRUS V1.3

"Perfume.731.b" contains/displays the texts:
IRA Virus 18
Irish Republican Army v18 Virus :
hat
By Capt Picard

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Pejuang

Description Macro.Word.Pejuang

This virus contains three macros:
Documents: NORMAL.DOT:
Perjuangan FileSaveAs
AutoOpen Revolusi
Public Public

The virus infects the global macros area (NORMAL.DOT) on opening an infected document and writes itself to documents that are saved with new name. Depending on current date it erased system files or formats the C: drive. The virus contains comments:
YOGYAKARTA 96
PESAN INI UNTUK MENGETUK HATI NURANI RAKYAT
MARI BERJUANG BERSAMA KAMI
TEGAKKAN KEADILAN YANG TELAH DIINJAK-INJAK
UNDERGROUND PUBLIC MESSAGES
!!!!!!!!!!!!!!!!!!!!!!!!!

Macro.Word.Pelaku

Description Macro.Word.Pelaku

This Word macro virus contains nine macros: FileSave, FileSaveAs, FileTemplates, ToolsMacro, ToolsCustomize, AutoExec, AutoClose, AutoOpen, FileOpen.
It infects global macros area on opening an infected document (AutoOpen) and infects other documents on opening, saving and saving with new name (FileOpen, FileSave, FileSaveAs).
On opening a document before infecting the virus deletes all macros in there (if they exist). When closing the virus rewrites the FileOpen macro (tries to protect itself against other viruses?)
On August 19 it displays the MessageBox:
Happy Birthday, Pakis Pratiwiall
Hari ini Pakis Pratiwi merayakan Hari Ulang Tahun... Matikan komputer,
tinggalkan semua pekerjaan, istirahatkan pikiran, ucapkan selamat kepada
Pakis Pratiwi.

On November 20 it displays the MessageBox:
Happy Birthday, NdeKlaimber...
Hari ini NdeKlaimber merayakan Hari Ulang Tahun... Matikan komputer,
tinggalkan semua pekerjaan, istirahatkan pikiran, ucapkan selamat kepada
NdeKlaimber.

Starting from 1998, starting from 19:00 the virus displays the UserDialog:
NdeKlaimber Menggugat ...
Berawal dari sebuah kepedihan... NdeKlaimberÖ dicampakkan dan
dihinakan... terpuruk bagaikan sampah busuk... NdeKlaimberÖ merintih
dengan segumpal dendam mendidih !!!
Kini saatnya NdeKlaimberÖ menunjukkan... masih adanya kekuatan untuk
membungkam mulut-mulut tak berperasaan... sebab hasrat untuk menjadi yang
terbaik adalah sesuatu yang sangat manusiawi... NdeKlaimberÖ manangis
harus melibatkan semua orang.
1997 NdeKlaimberÖ I'm Coming...

Home