Virus Database

Xav.Curepa.666

Description Xav.Curepa.666

This is a very dangerous virus. On April 2nd, it erases the hard drive sectors and displays the following message:
AntiCUREPA Virus, escrito en Paraguay por Xavirus Hacker.
Dios: tu único error fue crear a los inflados porteños.
Hitler persiguió a los judíos porque no conocía a los porteños!
Las Malvinas son del Reino Unido. Argentinos cobardes!

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Oetzi

Description Macro.Word97.Oetzi

It is a polymorphic virus. It contains eight macros in module "Modul1": AutoOpen, AutoClose, FileSaveAs, FileSave, ToolsCustomize, Mutate, Retro, Payload. It replicates on activation any of macros: AutoOpen, AutoClose, FileSaveAs, FileSave. The virus polymorphic engine inserts comments at random positions in the virus code.
The virus displays the Balloon:
Wichtig! Lesen sie folgendes genau durch:
He Bedienung! 5 Bier! Auch einen für diesen Schnapsgsicht daall. Danke!

The virus then displays the MessageBox:
W97M.Oetzi.A
Hallo, mein name ist Ötzi. Ihr könnt mich mal besuchen kommen. Für 8-9
Cuba Libre laß ich euch vielleicht gratis rein. UEO!!!
NEGSTE BUDE = 500m !!!!!!

It also erases the anti-virus files:
C:PC-Cillin 95Scan32.dll
c:pc-cil~1*.dll
C:PC-Cillin 95Lpt$vpn.*
C:PC-Cillin 97Scan32.dll
C:PC-Cillin 97Lpt$vpn.*
C:TscPC-Cillin 97Scan32.dll
c: scpc-cil~1*.dll
C:TscPC-Cillin 97Lpt$vpn.*
C:TBAVW95Tbscan.sig
c:Tbavw95Tb*.*
C:Tbavw95Tbavw95.vxd

Macro.Word97.Onex

Description Macro.Word97.Onex

The macro virus Word97.Onex contains only one macro named Extra. This macro contains an auto-function Document_Open that allows the virus to infect the system and documents upon opening the file and activating the virus.
The virus contains the following copyright string:
"Word 97/2k.Extra - Psyclone X"
"My first virus for the year 2k"

Home