Virus Database

Constructor.Macro.Word97.NTVCK

Description Constructor.Macro.Word97.NTVCK

This is a Word2000 macro-virus construction tool. The constructor itself is a Word2000 document that contains 14 modules:
NTVCK, frmPlugin, Main, frmSecret, frmcontact, frminfection, KillAV, frmPayload, frmStart, frmGreetz, frmAuthor, Ende, frmname, and boom.
When run, the constructor displays a picture containing the text "Necronomicon's Terror Virus Construction Kit." It then displays a menu with many future virus settings. The tool allows chooses replicating methods, polymorphic, stealth mechanisms, and many different types of effects.

The constructor then requests a virus name, and creates a virus source code.

Check other viruses! Be aware! Use Antiviral Software

Boys.500

Description Boys.500

It is a non memory resident harmless parasitic virus. It infects by standard way .COM-files of current directory. While getting infection the file's attributes sets to READ-ONLY. The virus sets the attribute of some .EXE-files to SYSTEM. It contains the text "The good and the bad boy".

BPU.2269

Description BPU.2269

This is a very dangerous memory resident partly encrypted parasitic virus. It hooks INT 9 and 21h, and writes itself to the end of COM and EXE files that are executed or closed. Depending on its counter, the virus infects the C:COMMAND.COM file.
By hooking INT 9, the virus, upon any keystroke, checks INT 1. and disables the virus tracing the code. On the 22nd of any month, the virus corrupts the data that is saved on the disk. On April 22nd, the virus erases the disk sectors. On the same date starting from 1999, the virus displays:
W9604 BPU

Home