Virus Database

Badguy Family

Description Badguy Family

These are dangerous non-memory resident viruses. They overwrite the beginnings of .COM-files of the current directory without storing the old contents of these files. They contain the text: "*.COM".
On Monday, "Badguy.265" creates something with CGA monitor ports, and then hangs-up the computer. It also contains the text "BadGuy Virus (c) by Cracker Jack 1991 (IVRL) Italian Virus Research Laboratory (C) 1990,1991 IVRL Head Quarter, Milan Italy".
On Monday, "Badguy.208" decrypts and types: "New BadGuy Virus - (c) By Cracker Jack 1991 IVRL Head Quarter Milan, Italy".

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Theatre

Description Macro.Word.Theatre

These are encrypted viruses, they contain the macros:
"Theatre.a": ToolsMacro, DocClose, FileClose, AutoOpen, CK
"Theatre.b": ToolsMacro, DocClose, FileClose, AutoOpen, CK, CK1

On 1st ("Theatre.a") or on 15th ("Theatre.b") of any month they delete all files in C: disk root directory. The viruses display the dialog boxes:
"Theatre.a":
TAIWAN THEATRE VIRUS by Dark Word
Hay..Hay.. YOU GOT A THEATRE VIRUS.

"Theatre.b"
THEATRE

Macro.Word.Thebman

Description Macro.Word.Thebman

This macro virus contains four macros in documents and five in NORMAL.DOT:
Documents NORMAL.DOT
autoopents ILMD
dateispeichernunterV DateiSpeichern, DateiSpeichernUnter
dateidruckenstandardV DateiDruckenStandard
dateidruckenV DateiDrucken

The virus infects the global macros area on opening documents. It infects documents on saving and saving with new name.
On printing documents the virus replaces the "s" symbols with "t". The virus contains the comments:
************************************************************
* ILMD V1.0 *
* *
* Written in November 1997 somewhere in Germany by Thebman *
* *
* Congratulations for decoding this file *
************************************************************

Home