Virus Database

ABC.2378

Description ABC.2378

It is very dangerous memory resident virus. It infects COM- and EXE-files while DOS accesses them. The virus manifests itself from 13th of every month: it checks keyboard and after double pressing of any key duplicates this key (for example the keyboard input "1001" is transferred to "10001"). The infector writes a small program into files that tries to erase the FAT of all hard disks after starting. The virus hooks INT 16h, 1Ch, 21h.
The virus uses very powerful algorithm of en/decryption. The en/decryptor contains much of the assembler commands ADD, SUB, XOR in random order.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.DMV

Description Macro.Word.DMV

This is the first known MS-Word macro virus. It contains only one macro - AutoClose, and infects the files that are saved on disk. While infecting this virus displays the MessageBox'es with the header:
Document Macro Virus

The messages are:
Counting global macros.
AutoClose macro virus is already installed in NORMAL.DOT.
AutoClose macro virus already present in this document.
Saved current document as template.
Infected current document with copy of AutoClose macro virus.
Macro virus has been spread.
Now execute some other code (good, bad, or indifferent).

Macro.Word.DNZ

Description Macro.Word.DNZ

It is an encrypted Word macro virus. It contains ten macros:
DnZ, AutoClose, FileNew, FileExit, ToolsSpelling, EditCut, EditCopy,
FileTemplates, ToolsCustomize, ToolsMacro

"DnZ" is the main macro. When executed it infects a document or the global macros area. Other macros are Word auto-macros and functions. When executed, they call the "DnZ" macro that will spread the virus.
The virus creates the profile section (WIN.INI file):
[Demo]
Program=Installed

On March 9th the virus displays the message box:
WM.DnZ
Written by Bill_HellGateS

Home