Virus Database

Win32.Barum.1536

Description Win32.Barum.1536

It is a possible dangerous nonmemory resident parasitic Win32 virus. It searches for PE EXE files in the current and Windows directories and infects them. While infecting the virus writes itself to the end of the file.
On March 6 from 0:00am till 1.00am GMT (Coordinated Universal Time - UTC, not local time) the virus attempts to delete all *.EXE files in Windows directory, but fails because of a bug.
The virus contains the text string:
[ Bajan Rum ]
Tekken' time ent no lazinessall

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.White

Description Macro.Word.White

This Word macro-virus contains a different number of macros in documents and template. In documents, there are three macros with names selected from six variants: AutoOpen, AutoClose, FileTemplates, ToolsMacro, FileOpen, Einstein.
While infecting the system, the virus creates the infected NARMOL.DOT template in the Word start-up directory. In this template the virus copies four macros: Einstein, FileOpen, FileTemplates, Show.
The virus contains the comments:
Einsteinium v.1.1. (White Virus)
Solidarity M Forever
Medan 1997

Macro.Word.Why

Description Macro.Word.Why

This virus contains only one macro, but while infecting copies it to two macros in documents and to three macros in NORMAL.DOT:
documents: AutoOpen, makemacros
NORMAL.DOT: AutoOpen, AutoClose, makemacros

The virus infects the global macros area (NORMAL.DOT) on opening an infected file (AutoOpen), and infects documents that are opened or closed (AutoOpen, AutoClose).
The virus displays the DialogBox:
Why Why Why
Why doesn't pepole work?
No money
No drink
No eat
No instant noodles
No lunch box

Home