Virus Database

Probe.2140

Description Probe.2140

It is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of .COM and .EXE files (except COMMAND.COM) that are executed. The virus also infects the files on the current disk:
DOSSMARTDRV.EXE WINDOWSSMARTDRV.EXE DOSDOSKEY.COM DOSKEYB.COM

In December from 1st to 5th the virus displays the message:
Please wait, Smartdrive is checking your disk structure.
Warning, interrupting this task could cause disk damage !

then erases the hard drive sectors, and then displays:
Oh, you are using MS-DOS. Now you see what you have got !
Greetings from Bill Gates all

The virus also contains the text strings:
.EXE.COMCOMMAND.COMMSDOS
Imperial Probe V 1.09

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Pesan

Description Macro.Word.Pesan

This is an encrypted Word macro virus. It contains five macros:
Documents: NORMAL.DOT:
pesan pesan
CopyOfFileSave FileSave
CopyOfFileExit FileExit
AutoOpen CopyOfAutoOpen
NormalAuto AutoExec

The virus infects the global macros area (NORMAL.DOT) on opening an infected document and writes itself to documents that are saved or closed.
Every five minutes it displays the MessageBoxes, but does not perform any action listed in there:
MicroSoft Warning!!!
You are about Formatting Hardisk, Are you sure?
FORMAT WARNING !!!
You have just activate the format.exe trigger,
all command will FORMAT your hardisk
SYSTEM DAMAGE WARNING !!!
System detected 'Bandung.d_t' VIRUS, all system will be
Damage Permanently !!! May God Have Mercy On you all.!!!

Macro.Word.Phardera.a

Description Macro.Word.Phardera.a

This is an encrypted virus. It contains only one macro FileOpen, and infects the system and documents upon File/Open call.
There is a text in the virus body:
WinWord.Phardera (with encrypt and stealth)
Virographer by Phardera [VBB]
Last Update: July 10, 96.
Dedicated to Dianita DSR and All VBBers
This virus was written in the city of Batavia, Indonesia.
If you found 'bugs' please contact me!

On the 14th day of any month, the virus displays a message box with the texts:
Phardera [VBB]
Dianita DSR. [I Love Her!]

On 31st day it displays:
Phardera [VBB]
Phardera was here!

Home