Virus Database

Weekend.866

Description Weekend.866

This is a benign non-memory resident parasitic virus. It searches for COM files, then writes itself to the end of the file. On Saturdays and Sundays, the virus displays a message in Russian ("Weekend is for rest"), and halts the computer.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Carrier

Description Macro.Word97.Carrier

This virus contains three macros in one class "ThisDocument": Document_Close, Document_New, Document_Open, and two in module "Agent": AutoOpen, FileSaveAs.
The virus replicates on documents opening, closing or creating. The replication routine used Import/Export functions via the C:NORMAL.BAS in case of NORMAL.DOT and C:DOCUMENT.BAS file in case of documents.
The virus has the comment which is used to detect already infected files:
REM WRITTEN BY LORD ARZ

The virus sets the caption for all windows:
Infected by the Carrier virus (a trooper has already landed)

Macro.Word97.Cascade

Description Macro.Word97.Cascade

This virus contains eight macros in one module "Cascade": AutoNew, AutoOpen, FileNew, FileSaveAs, FileTemplates, PayCascade, ToolsMacro, ViewVBCode. It infects the global macros area on opening an infected document (AutoOpen), and spreads itself to other documents on saving them with new name (FileSaveAs).
On creating a new document or file the virus displays one of the MessageBoxes:
Virus Cascade
Une CASCADE de lettre va s'afficher sur votre écranall

Virus Cascade
Je suis de retour...

The virus then manifests itself by video effect: it drops in the Word window random selected letters.

Home