Virus Database

Win32.Grenp

Description Win32.Grenp

This is a harmless memory resident parasitic Win32 virus. It stays in Windows memory as a hidden application (service process), and in the background permanently scans the current directory and infects PE EXE files in there. When the current directory changes, the virus switches to it and infects files in the new directory. While infecting a file, the virus writes itself to the end of the file.
The virus intends to create its infected "dropper" (the "Greenpeace.exe" file) in the Windows system directory and register it in the auto-run section in the system registry, but fails because of a bug.
The virus does not manifest itself in any way.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Divina.c

Description Macro.Word.Divina.c

This is an encrypted macro-virus. It contains only one macro - AutoClose.
If current minutes are 17 it displays message box with text:
ROBERTA TI AMO!
Massimo
Hard Disk damaged. Start antivirus ?
Virus 'ROBERTA' is running
Exit from system and low level format are recommended.
Virus stopped
Exit from System ?
Microsoft Windows

Macro.Word.DMV

Description Macro.Word.DMV

This is the first known MS-Word macro virus. It contains only one macro - AutoClose, and infects the files that are saved on disk. While infecting this virus displays the MessageBox'es with the header:
Document Macro Virus

The messages are:
Counting global macros.
AutoClose macro virus is already installed in NORMAL.DOT.
AutoClose macro virus already present in this document.
Saved current document as template.
Infected current document with copy of AutoClose macro virus.
Macro virus has been spread.
Now execute some other code (good, bad, or indifferent).

Home