Virus Database

Quandary

Description Quandary

It is a harmless memory resident stealth boot virus. The code of the virus is partly encrypted. The virus hooks INT 13h and writes itself to the MBR of the hard drive and boot sectors of the 1.44M floppy disks. The virus checks the disks for some program (boot driver? some other boot virus?), and infects these disks without alteration of the original boot sectors.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Sparkle

Description Macro.Word97.Sparkle

This is a stealth macro-virus. It contains three modules and 11 functions:
"Sparkle" - FileSave, Toolsmacro, Filetemplates, Sparkle,
Toolsmacro, Filetemplates, ViewVbCode,
"userform999" - ListBox2_Click, UserForm_Initialize, CommandButton2_Click,
CommandButton5_Click, UserForm_Click,
"userform900" - CommandButton1_Click, CommandButton2_Click,
CommandButton3_Click, CommandButton4_Click,
CommandButton5_Click, CommandButton6_Click, ListBox2_Click,
ScrollBar1_Change, UserForm_Click.

On saving files (FileSave), the virus disables the VirusProtection, infects the global macros area and documents.
The virus draws its own dialogue on entering the Tools/Macro menu (stealth). On pressing any button (except "Cancel"), the virus displays the MessageBox:
Microsoft Word
This program has performed an illegal operation and will shut down.

Macro.Word97.Splash

Description Macro.Word97.Splash

This is a polymorphic macro-virus. It contains only one macro Splash and one function AutoClose. The virus replicates itself on closing documents. On any infection, the virus randomly inserts into its text 20 lines of comments. The virus does not manifest itself in any way.

Home