Virus Database

Curse.400

Description Curse.400

It's a harmless memory resident parasitic virus. It copies itself into the Interrupt vectors table, traces and hooks INT 21h and writes itself to the end of COM- and EXE-files that are executed. It contains the internal text string:
CURSE IV - Dedicated to Eve

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Remplace

Description Macro.Word97.Remplace

This macro virus contains seventeen macros in one module "Akrnl": Akrnl, AutoExec, AutoNew, AutoPrint, FileNew, FileClose, FileExit, autoOpen, AutoExit, AutoClose, ToolsMacro, FileTemplates, ViewVBCode, RandomRemplace, Remplace, Sauve, DelVir.
It infects the global macros area on opening an infected document (AutoOpen) and infects other documents on opening, closing, printing or creating (FileOpen, AutoPrint, FileClose, FileNew). Before infecting the virus removes all modules from infecting document and global macros area.
The virus turns off the Word virus protection (the VirusProtection option).
On opening infected document if day of month is above 22, the virus with probability about 27% replaces text "donc," with one of following strings:
ainsi, si j'en crois ce que mon incompŠtant de professeur me dit,
ainsi, mon chat a perdu ses dents. De plus,
ainsi, selon ma grand-m¨re,
ainsi, la mati¨re du cours est plate. De plus,

Macro.Word97.Romeo

Description Macro.Word97.Romeo

This macro virus infects MS Word documents and templates when they are created, opened or closed.
The virus itself is a macro. It contains the following text string:
'Anti-Virus for & ROMEO'
'Anti_Virus'
When an infected file or template is opened, the virus disables the ban on executing macros in Word and blocks all attempts to open the built-in Visual Basic editor.
The virus checks for macros containing the string Anti_Virus and if such a macro is not found, it infects documents.

Home