Virus Database

Win95.DarkSide

Description Win95.DarkSide

It is not a dangerous nonmemory resident parasitic Win95 virus. It searches for PE EXE files, then writes itself to the end of the file: increases the size of last section, writes its code to there and modifies the entry point address. To get access to Windows file access function the virus scans Win95 Kernel32 internal formats. To detect already infected files the virus saves the "LT" string to the checksum field in DOS stub header.
On March 9th the virus displays the MessageBox:
DarkSide
Nothing Going to
Save you From a Love
that's Blind
Slip to the
DarkSide
and Cross that Line
March 9, 1986

The virus also contains the text that contains names of functions used by the virus:
CreateFileA _lclose ReadFile FindFirstFileA FindNextFileA WriteFile
SetFilePointer LoadLibraryA GetProcAddress USER32 MessageBoxA

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Buero

Description Macro.Word.Buero

This is an encrypted virus. It contains two macros:
NORMAL.DOT Infected files
DateiSpeichern AutoOpen
BuroNeu BuroNeu

This virus infects the system on AutoOpen and writes itself to files on FileSave (DateiSpeichern).
If the current date is above than 15.8.96, the virus renames the system file IO.SYS to IIO.SYS (then it is impossible to boot DOS system), searches for the C:*.DOC files and deletes them.

Macro.Word.Bukit

Description Macro.Word.Bukit

It is an encrypted macro virus. It contains seven macros: AutoExec, AutoOpen, FileSave, FileSaveAs, ToolsMacro, ShellOpen, FileOpen. The virus infects the global macros area on opening an infected document (AutoOpen) and writes itself to documents that are saved (FileSave, FileSaveAs).
On the 25th of any month it displays the MessageBox:
Selamat
Sekarang adalah tanggal 25, sudahkah anda mengambil gaji?
He..he..Selamat. Kalau bisa, lebih keras lagi kerjanya.
Bravo Bukit Asam !!!

Depending on the system date on FileSaveAs the virus displays the MessageBox:
Non Critical Error
Internal error was occured in module UNIDRV.DLL
Your application may not be work normally.
Please contact Microsoft Product Support.

On entering Tools/Macro menu (macros ToolsMacro) it displays the MessageBox:
Critical Error
Internal error was occured in module UNIDRV.DLL
Please contact Microsoft Product Support.

Home