Virus Database

Timishoara.2132

Description Timishoara.2132

This is a relatively harmless memory resident partly encrypted parasitic virus. It hooks INT 8 and 21h, and on Fridays, it also hooks INT 9. The virus writes itself to the beginning of COM and to the end of EXE files that are accessed. The virus does not infect the COMMAND.COM file. By hooking INT 8 and 9, the virus runs itself by a video and sound effect: it beeps on a PC speaker, and displays the following message:
+-----------------------------+
¦ Greetings from Timishoara ! ¦
¦ Call 0040-61-13821 ¦
+-----------------------------+

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Rsm

Description Macro.Word97.Rsm

This is a Word97 macro virus, it contains one macro: AutoOpen. It is a "non-memory resident" virus - on opening an infected file, it searches for non-infected documents in directories (from current to root) and infects them. To detect already infected documents, the virus writes its ID-stamp to a not used field in the document's header.
Depending on the system random counter, the virus displays the MessageBoxes:
bwahah !!!
RatSMagic by Reptile

Macro.Word97.Satan

Description Macro.Word97.Satan

This virus contains 14 macros in one module "Satan666": Satan666, FileOpen, FileClose, FileSaveAs, FileSave, FileNew, AutoExec, AutoNew, AutoSave, AutoClose, AutoOpen, ToolsOptions, ViewVBCode, ToolsMacro. The virus infects the system and documents on calling any of these macros.
The ToolsMacro and ViewVBCode functions are available only if the first line in C:AUTOEXEC.BAT file contains the text:
REM Hail Satan!

Else the virus cancels these procedures and displays the MessageBox:
Microsoft Visual Basic
Sub or Function not defined

In June the virus erases the files and directory:
c:windows*.*
c:windowssystem*.*
c:My Documents

It then appends to the C:AUTOEXEC.BAT file the text:
@echo off
cls
echo Hail Satan!
echo Hail Satan!
echo Hail Satan!
echo Hail Satan!
echo Hail Satan!
echo Hail Satan!
echo Hail Satan!
echo Hail Satan!
echo Y>Yes
attrib -h -r -s
del *.* <Yes
end

and displays the MessageBox:
Satan666 Word97 Virus
Hail Satan!

Home