Virus Database

Week.1614

Description Week.1614

It is not a dangerous memory resident partly encrypted parasitic virus. It hooks INT 16h, 21h and writes itself to the end of COM and EXE files that are executed or opened. The virus changes the system date (increases by a week?).

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Crow

Description Macro.Word.Crow

This brazilian virus contains three macros: autoOpen, CROWFuck, ArquivoSalvar. It replicates on opening and closing documents (autoOpen, ArquivoSalvar auto-macros).
The virus code contains many effects:
the virus deletes macros accessing menu items,
on the 5th of any month starting from April it inserts the strings into the document's summary info:
Title = The CROW_Fuck!!!
Subject = nothing
Author = The Best Virus Creator
Comments = Surprise!!! You Die!!!!!
VOCÊ FOI INFECTADO PELO VIRUS The CROW_Fuck - Macro - Fuck Microsoft,,
Mcafee, ThunderByte and more!!!
!í!í! Bye Bye LAMMER !í!í!

on 8th of any month starting from May it adds a file erasing commands to the C:AUTOEXEC.BAT file and then displays the MessageBox:
The CROW_Fuck - Macro virus
Surprise!!! You Die!!!!!!
> > Brazil < <

if system minutes > 57 , the virus prints to the status bar the running string:
The CROW_Fuck - Brazil - 97 !!!!!

if there are more than 50 words in document, the virus insert a space at random selected place. Depending on random counter it also insert into document the "CROW" word.
on Fridays the virus insert the text into document:
CROW_Fuck - The Complete Macro Vírus
Este vírus é dedicado a todos que pensam que o povo do terceiro mundo não
é capaz de criar coisas que tenham utilidade; aos Lammers, porque sem
eles não daria para se disseminar o vírus; à Microsoft, por tornar tão
fácil a pirataria; à Mcafee, por seu Vir
usScan ser totalmente burro e fácil de se enganar.
See Ya
The CROW

Macro.Word.Czech

Description Macro.Word.Czech

This virus contains two original macros that are copied to five macros while infecting the NORMAL.DOT:
Documents NORMAL.DOT
AutoOpen AutoOpen
AutoClose
Crypt Crypt
ToolsMacro
FileTemplates

The virus replicates itself to the global macros area on opening an infected document, and infects documents that are opened or closed.
On entering the Tools/Macro or File/Templates menu the virus depending on random number sets for current document random numerical password and displays the MessageBox:
ULTRAS
Crypt by ULTRAS [Rioters]

Home