Virus Database

VICE.01.Sample

Description VICE.01.Sample

VICE (Virogen's Irregular Code Engine) is the polymorphic engine such as MtE and TPE engines. There are several versions of that engine, they contain the text strings:
[VICE v0.1ß, by _irogen]
{VICE v0.2ß, by _irogen [NuKE]}
{ViCE v0.3ß, by _irogen [NuKE]}
[_iCE v0.5, by _iro

There are VICE-based viruses that are distributed in the VICE package, or by VICE author. They are harmless memory resident parasitic viruses. They hook INT 21h and writes themselves to the end of COM and EXE files that are executed. They contain the text strings:
"VICE.01.FireCide": _FireCide, by _irogen_
"VICE.01.Sample": [_iCE Sample Virus v0.1]
"VICE.02.FireCide": _FireCide2, by _irogen_
"VICE.03.FireCide": _FireCide2, by _irogen_
"VICE.02.IceBurn": [IceBurn, by _irogen]
"VICE.02.IceMelt": [IceMelt, by _irogen]
"VICE.03.One13th": One/Thirteenth, coded by _irogen [NuKE]

"VICE.02" delete CHKLIST.MS and CHKLIST.CPS files, if they exist.
"Vice.05.Code" on ChDir DOS function searches and deletes some anti-virus data files (*.-V*, *.MS*, *.CP*). That virus contains the text strings:
*.*
CodeJournal by _irogen [NuKE]

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Breeder

Description Macro.Word.Breeder

The virus contains one macro "AutoOpen" in documents and infects the global macros area on opening an infected document. In NORMAL.DOT this macro is renamed to "FileSave" and the virus infects the files that are saved. The virus does not manifest itself in any way, it contains the comments:
BREEDER BY -=>NEMESIS<=- 5/4/97
"DO NOT PROVOKE THE INTROVERT"

Macro.Word.Buero

Description Macro.Word.Buero

This is an encrypted virus. It contains two macros:
NORMAL.DOT Infected files
DateiSpeichern AutoOpen
BuroNeu BuroNeu

This virus infects the system on AutoOpen and writes itself to files on FileSave (DateiSpeichern).
If the current date is above than 15.8.96, the virus renames the system file IO.SYS to IIO.SYS (then it is impossible to boot DOS system), searches for the C:*.DOC files and deletes them.

Home