Virus Database

Clone.833

Description Clone.833

This is a harmless companion virus. It creates COM files with the same name as EXE file if found, and writes itself into this COM file.
This a memory resident virus. It hooks INT 21h, and hits .EXE files that are executed. In April, the virus types:
Your PC is Cloned!!
It also contains the internal text string:
.Clone Virus ver 2.0..(c) Cataclysm 1992
Sydney, Australiaall.To Create and Mutate...".

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Gang

Description Macro.Word.Gang

This is an encrypted virus. It contains two macros: Paradise, Gangsterz. The virus does not have any auto-macros and to receive control it assigns SPACE key to macro "Paradise" and "E" key to macro "Gangsterz". As a result MS Word will call these macros on SPACE and "E" key. MS Word will also restore these keys assignments any time when loading an infected document or global macros.
On January 15th the virus calls its trigger routine - it creates the NORMAL.DOT file and insert the text written in Bold FontSize 26 to there:
Big_Daddy_Cool Virus generated by NJ

and then draw some picture in there.
The virus drops the batch virus "BAT.Xop", writes to system profile (WIN.INI file) the strings:
[Intl]
XOP=Installed

and appends to the end of C:AUTOEXEC.BAT file the commands:
@echo off
Xop.bat

Macro.Word.Gas

Description Macro.Word.Gas

This virus contains macros:
Documents NORMAL.DOT
AutoOpen GAS
I R, AutoClose, FileTemplates, ToolsMacro, Autoexec
A S, FileSaveAs

Depending on the current date it inserts into C:AUTOEXEC.BAT the commands:
BREAK OFF
If exist C:GAS.BAT call GAS.BAT
BREAK ON

To the C:GAS.BAT file the virus writes the commands that delete the *.JPG, *.GIF, *.BMP files on the C: drive, including subdirectories. Depending on current seconds the virus outputs the string to the statusline :
A s s a l a m u a l a i k u m

Home