Virus Database

Rip.699

Description Rip.699

It is not a dangerous memory resident encrypted parasitic virus. It hooks INT 10h, 21h and writes itself to the end of COM files that are executed. On March, 6th and September, 8th it displays the message:
RIP Patsy Cline 8th September 1932 - 6th March 1963

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Cap

Description Macro.Word.Cap

CAP - infection routine AutoExec - calls the infection routine AutoOpen - - // - FileOpen - - // - FileSave - - // - AutoClose - - // - FileClose - - // - FileSaveAs - - // - ToolsMacro - hides all macros ("stealth" routine) FileTemplates - - // -

The virus not only disables ToolsMacro and FileTemplates menus, but also deletes the references to them in the File and Tools main menus. The virus also disables auto-macros. As a result it is not possible to disinfect this virus by using Word functions -it is not possible to delete macro viruses by creating new or running existing virus removing macros.
The virus emulates "FileSaveAs" while saving infected documents -and writes an empty document to disk.
The virus contains the following strings (comments):
C.A.P: Un virus social.. y ahora digital..
"j4cKy Qw3rTy" (jqw3rty@hotmail.com).
Venezuela, Maracay, Dic 1996.
P.D. Que haces gochito ? Nunca seras Simon Bolivar.. Bolsa !

Macro.Word.Catch

Description Macro.Word.Catch

This encrypted macro virus contains six macros: AutoOpen, encrypt1, FileSave, AutoClose, infectdoc, infectnorm. It infects the global macros area on opening an infected document (AutoOpen) and copies itself to other documents on their opening.
The virus replaces (mixes) in document the characters: "i" <-> "o", "a" <-> "e". This mixing is not visible in documents under infected system conditions: when documents are opened, the virus replaces these letters back to original state. When documents are saved, the virus replaces the letters again. After each replacing the virus displays the dot to the StatusBar.
On document closing depending on the system random counter the virus displays the message:
Its a Catch 22 Situation!

Home