Virus Database

Senda.4162

Description Senda.4162

It is a dangerous memory resident encrypted multipartite virus. It writes itself to the end of .COM files and infects the MBR of the hard drive and boot sector of floppy disks. To intercept system events the virus hooks INT 13h, 21h. The virus has a bug and infect Windows' COMMAND.COM. As a result the virus corrupts the COMMAND.COM and the system halts. The virus contains the text:
- Senda, dedicated to my love PL -

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Peace

Description Macro.Word97.Peace

This virus contains two macros in module "peace": AutoOpen, helpabout. It replicates on documents opening. It disables the menu items "Tools/Macro" and "Tools/Templates and add-insall". On 1st of each month on entering the Help/About it displays the MessageBox:
Peace
Copy me I want to travel

Macro.Word97.Pendron

Description Macro.Word97.Pendron

This is a stealth macro virus. It contains 13 procedures in module "XBoss": Boss41, ToolsCustomize, ViewVBCode, FilePrintPreview, FilePrintPreviewFullScreen, ToolsMacro, ToolsOptions, FileSaveAs, AutoClose, AutoExec, AutoOpen, PlanetJangkit, TularComputer.
The virus infects global macros area on opening an infected document (AutoOpen), and infects other documents on their opening and closing (AutoOpen, AutoClose).
The virus turns off the Word virus protection (the VirusProtection option) and all Word sounds. It also hides the "Templates and Add-Insall" menu (stealth).
On infecting the virus modifies MS Word properties:
UserName = "Pendron"
UserInitials = "Gunadarma"

On entering the "ToolsMacro" menu the virus asks for a password:
Pendron Security
Enter Your Password:

If entered text is not "princess" the virus displays the message:
Pendron GN'R Production
You Wrong My Friend !!!

If 11th day of month falls on Sunday the virus displays MS Word baloon:
Hallo Sobat Semua....
Salam Buat Anak-Anak Gunadarma From Pendron

Home