Virus Database

Piggy.709

Description Piggy.709

It is not a dangerous nonmemory resident encrypted parasitic virus. It searches for COM files in the current and patent directories, then writes itself to the end of the file. The virus contains the text string:
[Piggy] [Ruiner /SOS]

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Natas

Description Macro.Word97.Natas

It is polymorphic and stealth macro virus. It contains six macros in the one module "Chaos": AutoOpen, FileNewDefault, FileNew, ToolsMacro, FileTemplates, ViewVBCode, FormatStyle.
The virus infects the system on opening an infected document. Infection does not modify the NROMAL.DOT file - the virus saves infected file in Startup path and in C:WINDOWSSHELLNEWWINWORD8.DOC directory. Documents get infection only on creating.
The virus polymorphic engine inserts at random places into virus code comments: "Rem " or "'". The virus disables macro code viewing (stealth) by dummy macros ToolsMacro, FileTemplates, ViewVBCode.
The virus contains the comments:
W97M/Chaos by Lord Natas
2/12/98 (its about time I released it!)
"Without the threat of death there's no reason to live at all"
-Marilyn Manson

Macro.Word97.NightShade

Description Macro.Word97.NightShade

This macro virus contains only one macro named NightShade. This macro contains auto-function AutoClose that allows the virus to infect the system and documents on file closing. Depending on the system date and random counter the virus displays the text:
Attention:
Word97.NightShade by Pyro [VBB]

On Friday 13th it sets to documents the password "NightShade".

Home