Virus Database

PrintMonster

Description PrintMonster

It is a dangerous nonmemory resident parasitic virus. It searches for COM files of the current directory, then it writes itself to the end of the file. Sometimes it leaves a small TSR program that hooks INT 17h and changes the letters that are printed. The virus contains the text string:
PrintMonster30

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Gsis.b

Description Macro.Word.Gsis.b

This encrypted macro virus contains four original macros that are copied with names:
Documents NORMAL.DOT
AutoClose AutoClose
AutoOpen AutoOpen
GNull Biblioteca, ArquivoModelos, FerramMacro
(or UtilMacro depend on version Word).
GArqImprimir ArquivoImprimir, ArquivoImprimirPadr o

It replicates itself on documents opening and closing (AutoOpen, AutoClose). To load its copy to the Word global macro area it writes its copy to the Word Startup directory with the GSIS.DOT name.
Starting from October 12 1997, if current document contains seven or more pages of text, the virus creates new document and writes the text to there:
GSIS will not survive !!
Natural & Gnomo are back !!
If you are not understanding anything that's happening here, call the closest GSIS *technician*.
Maybe he has another nice *solution* for your problem. Ha! Ha! Ha!
Things will be the way we want, from now on!
Natural, Inc. & Gnomo Produ es

Macro.Word.Guess

Description Macro.Word.Guess

This encrypted virus contains only one macro - AutoOpen. Depending on the system random counter it creates the NORMAL file, writes the string to there, prints and closes it. The strings are:
The word is out.
The word is spreading.
The Phantom speaksall
Sedbergh
is CRAP
The word spreads...

Also depending on the system random counter the virus inserts the strings in the current document:
This school is really good. NOT
We all love Mr. Hirst.
Mr. Hirst is a great bloke
M.R.Beard
This network is REALLY fast.
Hi sexy!
Who's been typing on my computer?
Well helloooo there!
Guess who?

Home