Virus Database

Realize.498

Description Realize.498

It is a harmless nonmemory resident parasitic virus. It searches for .COM files and writes itself to the beginning of the file. The virus contains the text string:
WHAT? I gotta die before you [realiZe] I was a nigga with open eyes.Dont
you hear the guns you stupid, dumb,dicksuckin, bum politicians![realiZe] -
THE LOST FREEDOM / SWEDEN

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Tunguska

Description Macro.Word.Tunguska

This is an encrypted Italian macro virus. It contains eight macros: AutoExec, AutoOpen, FileApri, AutoClose, FileSalva, GuidaSupporto, FileSalvaConNome, GuidaInformazioni.
The virus infects the global macros area on opening an infected document (AutoOpen) and writes itself to documents on saving and saving with new name (FileSalva, FileSalvaConNome).
The virus creates two strings in the WINWORD6.INI file in [Microsoft Word] section:
DictionaryHelp=1
DOC-PATH=<NORMAL.DOT directory>

The virus also tries to read from this section two variables: "CheckCRC" and "Debug". If CheckCRC=1, the virus disables its infection routine. If Debug=1, the virus displays many debug MessageBoxes.
The virus contains the comments:
------------------------------------------------------------------------
Virus: TUNGUSKA
------------------------------------------------------------------------
Variabile in Winword6.ini:
CheckCRC$ : se = 1, il virus NON infetta il MIO computer
Debug$ : se = 1, visualizzo i messaggi di Debug
DictionaryHelp$ : se = 1, scattata una certa data
------------------------------------------------------------------------
MACRO Italiane MACRO Inglesi COMMENTO
------------------------------------------------------------------------
AutoClose AutoClose intercetta doppio-click
AutoExec AutoExec intercetta avvio Word
AutoOpen AutoOpen intercetta apertura file
FileApri FileOpen intercetta Dialogo Apri
* FileChiudiOChiudiT. FileClose intercetta chiusura file
FileSalva FileSave intercetta salva file
FileSalvaConNome FileSaveAs intercetta Dialogo SalvaConNome
* FileModelli Templates intercetta Dialogo Modelli
GuidaInformazioni GuidaInformazioni virus
GuidaSupporto GuidaSupporto per controllo presenza virus
------------------------------------------------------------------------

Macro.Word.Twister

Description Macro.Word.Twister

This virus does not manifest itself in any way. It contains eight macros:
NORMAL.DOT Infected documents
FileSaveAs twFSA
AutoExec twAE
twAC AutoClose
FileSave twFS
AutoExit twEX
twFC FileClose
twFE FileExit
twFQ FileQuit

The virus infects the global macros area on FileClose, FileExit and AutoClose. The documents get infection on AutoExit, FileSave and FileSaveAs.
The virus contains commented strings:
"Twister 2000" v.1 (c) Neo-Luddite Inc.
For Robin Hood

Home