Virus Database

VBS.Lanus

Description VBS.Lanus

This virus is written in Visual Basic Script (VBS) language and encrypted (it is a VBE - Visual Basic encoded script). When activated, it searches for files with .html and .htm extensions and infects them by writing its code to the top of file.
The virus marks infected files with a "tag-mark" () and doesn't infect them again.
The virus doesn't contain any payload.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Desecration

Description Macro.Word97.Desecration

This is Chinese (Taiwan) specific macro virus contains five macros in one module "Desecration": AutoOpen, FileSave, FileNew, FileOpen, Desecration.
The virus infects the global macros area on opening an infected document (AutoOpen). Other documents get infection on their open, creating and saving (FileOpen, FileNew, FileSave).
The virus does not manifest itself in any way. The code of virus contains the comment:
Desecration By RUiNER /Sign Of Scream

Macro.Word97.Dig

Description Macro.Word97.Dig
Dig is a stealth macro virus. It contains the following macros:
AutoOpen, AutoExec, FileSave, FileSaveAs, ToolsOptions, ToolsMacro, ViewVBCode.

When an infected file is opened the virus disables the VirusProtection and DisableAutoMacros security options. The virus infects documents while they are opened, closed, or saved with alternative names (AutoOpen, FileClose, FileSaveAs).
The virus hides its body while Tools/Macro or File/Templates menu items are invoked.
If the user tries to view the macros source code, the virus calls the FatalAppExit system function and displays the following message:
"?R?Ç'Í WinWord ?Ì? ' Ä × 'Í-ÇÏ Rɳ??Ç ?Á³ ?ÌR?? VBA! Code : dd!Actor"
If the current hour and minute values match (for example, 8:08) while the virus is infecting a document, it creates a new auto-format rule that replaces "," with ", ?'³-," and shows a message box with the following text:
Copyright c 1999 by dd!Actor.
All rights reserved.

Home