Virus Database

Constructor.DOS.DREG

Description Constructor.DOS.DREG

DREG (Digital Hackers' Alliance Randomized Encryption Generator) is a virus constructor. It creates virus source codes (ASM files), then runs TASM and TLINK to compile these source to executable files. DREG creates nonmemory resident encrypted COM viruses. They search for COM files in the current directory and write themselves to the end of files.
While creating new viruses DREG uses several variants of code and adds junk instructions sequences. DREG also used several anti-heuristic tricks.
The DREG constructor has several bugs, as a result in some cases it creates buggy viruses that may halt the system or corrupt the files while infecting them.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Fire

Description Macro.Word.Fire

It is a German specific encrypted Word macro virus. It contains nine macros: AutoExec, AutoOpen, DateiNeu, AutoClose, DateiÖffnen, ExtrasMakro, DateiBeenden, DateiDrucken, DateiSpeichernUnter.
It infects the global macros area on opening an infected document and writes itself to documents on closing and saving. The virus contains the comments:
Rode Du bist schlimmer als Masch!!!!!!!!!
Irrtum!
Ok! Ein Witz mit Rode, Masch und Willer in den Hauptrollen!
Die 3 Sucker sollen erschossen werden!(BITTE! BITTE!)
Auf jeden Fall stehen sie vorm Erschiessungskomando, sagt
Willer: "Seht da! Ein Orkan" Soldaten drhen sich um Erschissung
verschoben! (So'n Pech aber auch)
Nächster Tag, gleiches Spiel! Masch ruft: "Eine Sinnflut! all"
Erschissung verschoben....
Nächster Tag alle stehen wieder an der Mauer, denkt Rode sich,
Mensch ich muss noch was sagen zur Ablenkung!
Ruft er: "FEUER!!!"
ROTFL ;>>>>>

Macro.Word.Flu

Description Macro.Word.Flu

It is an encryted macro virus. It contains seven macros: AutoExec, AutoOpen, FileOpen, FileSave, Influenza, FileSaveAs, ToolsMacro (stealth).
The virus infects the global macros area on opening an infected document (AutoOpen) and affect other documents on saving (FileSave).
On September 10 and April 16 the virus displays the MessageBox:
Don't work too hard. Relax for a moment. It's your birthday!

It then creates the C:FLU.BAT file and writes the instruction to there:
echo Just get back to workall I will not do anything to your computer!

On entering the Tools/Macro menu the virus displays the MessageBox:
You cannot create, edit or delete your macro right now!
It's being updated.. Sorry for the inconvenience.

It also contains the comments:
This macro is dedicated to my girlfriend, RS
The one who love me and always do her best for me
And I make this as a gift
To always memorize her love, and mine too....
RS, I Love You...
Dibuat di Jakarta
Tanggal 29 September 1996

Home