Virus Database

Tox.203

Description Tox.203

This is a group of harmless, non-resident viruses.
The group includes Tox.203, Tox.243, Tox.253, and Tox.260
The viruses search for .COM files, and then write themselves to the end of these files.
The viruses can contain the following text:
(x)VAMPiR0

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Screw

Description Macro.Word.Screw

This macro virus contains 11 macros:
Documents NORMAL.DOT
ABC ABC
AO AO
AutoOpen
FileOpen
FileTemplates
FP FP, FilePrint
FSA FSA, FileSave, FileSaveAs
HLP HELP, HLP
SCR SCR
TMC ToolsMacro, ToolsCustomize, FileTemplates, TMC
ToolsMacro

It infects the global macros area on opening an infected document, but has an error - it copies nonexistent macros AE instead of AO. As a result this virus is able to replicate only once - there will be no AutoOpen macro in second generation.
On printing depending on the current time the virus pastes at the end of the document the text "SCREW VIRUS IS HERE" and replaces all sequences:
' a ' -> ' e '
' I ' -> ' Me '
'. ' -> ' !!! '

and restores them after printing.
The virus installs new ScreenSaver (Marquee), this saver will display the message:
You Are Infected With The Screw Virus!!!

Macro.Word.Shadow

Description Macro.Word.Shadow

This is an encrypted Word macro virus. It contains two macros that have identical code inside: AutoOpen, AutoClose. The virus infects the global macros area and documents on opening an existing document or closing a document. The virus does not manifest itself in any way.

Home