Virus Database

Titanium.844

Description Titanium.844

It is a harmless nonmemory resident encrypted parasitic virus. It searches for COM files and writes itself to the beginning of the file. It contains the text string:
*.com
`rbase' - Titanium

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Ceefour

Description Macro.Word.Ceefour

This is an encrypted Word macro virus. It contains six macros: AutoOpen, FileSave, FileOpen, FileTemplates, ToolsMacro, CFFSA.
It infects the global macros area on opening or saving an infected document (AutoOpen, FileSave). It writes itself to the documents that are saved with new name (FileSaveAs).
The virus disables the ToolsMacro and FileTemplates menus (stealth). While opening a document the virus checks its name and disables its stealth routine, if the name of document contains the sub-string "TONY".
On April 1st the virus erases the files on the C: drive. The virus contains the comments:
C-4 By Karl
"You are about to have a very bad day."
"It looks like C4 in the mothers arm."
"We are both professional, This is personal."
"And when Alexander saw the bredth of his domain he wept for there
were no more worlds to conquer (benefits of a classical education)"
quotes from the masters!

Macro.Word.Chaka

Description Macro.Word.Chaka

This is double-language virus, it supports both English and German Word versions. It contains only one macro AutoOpen in infected documents, but creates three macros ChAkA, FileOpen, DocClose in NORMAL.DOT while infecting the global macros area.
The ChAkA macro is the copy of AutoOpen, it contains the infection routine. Other macros (FileOpen, DocClose) call this infection routine. As a result the virus infects the global macros area on opening an infected document (AutoOpen) and writes itself to documents that are opened (FileOpen) or when document's window is closed (DocClose).
The virus contains the text string:
ChAkA! Nightmare Joker [SLAM]

Home