Virus Database

SMEG.Pathogen

Description SMEG.Pathogen

This is a dangerous memory-resident parasitic polymorphic virus. It was written by using a SMEG polymorphic engine. It traces and hooks INT 21h, and write itself to the end of COM and EXE files that are executed or opened. While infecting a file, it checks the file name, and does not infects the files with names CO*.*, F-*.*, SC*.*, TB*.*, VI*.*, FS*.*, VP*.*, VS*.*, CL*.*, SM*.*, FL*.*. On Mondays, depending on the system time and its internal counters, the virus erases the CMOS and the disk sectors, and then displays the following message:
Your hard-disk is being corrupted, courtesy of PATHOGEN!
Programmed in the U.K. (Yes, NOT Bulgaria!) [C] The Black Baron 1993-4.
Featuring SMEG v0.1: Simulated Metamorphic Encryption Generator!
'Smoke me a kipper, I`ll be back for breakfastall..'
Unfortunately some of your data won`t!!!!!
It also contains the following text strings:
EXECOM /:.<>+=;,"[]|OC-FCSBTIVSFPVSVLCMSLF
SMEG v0.1

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Cebu

Description Macro.Word.Cebu

This is an encrypted macro virus. It contains four macros: AutoExec, AutoOpen, AutoClose, MsRun. It infects the global macro area on AutoOpen and writes itself to documents on AutoOpen and AutoClose. Depending on the system time it replaces the word "Asian" with "Cebu" in current document.

Macro.Word.Ceefour

Description Macro.Word.Ceefour

This is an encrypted Word macro virus. It contains six macros: AutoOpen, FileSave, FileOpen, FileTemplates, ToolsMacro, CFFSA.
It infects the global macros area on opening or saving an infected document (AutoOpen, FileSave). It writes itself to the documents that are saved with new name (FileSaveAs).
The virus disables the ToolsMacro and FileTemplates menus (stealth). While opening a document the virus checks its name and disables its stealth routine, if the name of document contains the sub-string "TONY".
On April 1st the virus erases the files on the C: drive. The virus contains the comments:
C-4 By Karl
"You are about to have a very bad day."
"It looks like C4 in the mothers arm."
"We are both professional, This is personal."
"And when Alexander saw the bredth of his domain he wept for there
were no more worlds to conquer (benefits of a classical education)"
quotes from the masters!

Home