Virus Database

Rencodes.4206

Description Rencodes.4206

It is a dangerous memory resident encrypted companion virus. It hooks INT 21h and creates companion .COM files when DOS accesses to .EXE files. Depending on the system date and time it renames all files of current directory to FILEnnnn.nnn names, and creates the RENCODES.BRE file with the list of renamed files. The virus manifests itself with some video effect, and contains the text strings:
COMEXE
THIS IS THEVIRUS
File0000.000
RENCODES.BRE

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Wordde

Description Macro.Word.Wordde

This is a dangerous Word macro virus. It contains six macros: WordDE, AutoExec, FileOpen, FilePrint, FileSaveAs, AutoOpen (WordSU in NORMAL.DOT). It infects the system on opening an infected document (AutoOpen), it infects documents that are opened (FileOpen) and saved with new name (FileSaveAs).
The virus sets on the system timer a macro that shutdowns Word in a random selected time. On printing documents the virus replaces a string in Russian with new one. The virus creates the section in Windows profile (WIN.INI file):
[gay]
lox= <opened infected documents counter>

When counter reaches 5, the virus erases the COMMAND.COM file.

Macro.Word.Wordworm

Description Macro.Word.Wordworm

It is a dangerous Word macro virus. It contains three macros: AutoOpen, ArquivoAbrir, ArquivoSalvarComo. The virus infects the global macro area on opening an infected document (AutoOpen), and writes itself to documents on opening (ArquivoAbrir) and saving with new (ArquivoSalvarComo) name.
On February and April 30 the virus displays the MessageBox:
Alegria, vc sú perdeu todos os seus dados! (C) Worm _ root / 97
WordWorm Virus is fertilizing the soil of your HD (crashing lamah)!!
Copyright (c) - Worm _ root of VBB and Global Destruction Inc.
All rights reserved. H/P/C/CC .) /V/A. Brasil fev/97

The virus then formats the hard drive and inserts the text into the current document:
|/
(oo) WordWorm
(( )) help To MicroFuck
( _ ) by
( _ ) Worm_root
( _ ) Global Destruction Inc./VBB. No fears, no lamahs. Just us!
( _ ) The brasilian phrackers revenge. Your computer nightmare came true!

Home