Virus Database

DAME.Lame.2326

Description DAME.Lame.2326

This is a harmless nonmemory resident parasitic virus. It searches for COM files and writes itself to the end of the file. It contains the string:
This is a lame virus slapped together by DA/PS
To demonstrate DAME 0.91
DAME (Dark Angel's Multiple Encryptor) is the polymorphic generator. It creates the decryption routine and encrypt the virus body, then the virus saves these part of code in file that is being infected.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Stress

Description Macro.Word.Stress

This is an encrypted Word macro virus. It contains three macros: AutoOpen, FilePrint, FileSaveAs. The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved with new name or printed (FilePrint, FileSaveAs).
The virus removes all menus that allow to check macros. On printing a document the virus not only infects it, but also removes all text from the document, disables re-do (EditUndo) and then prints the text:
STRESS '97
Special for my love by
The Free Hackers
Viroright (C) 1997 Internation Virus Research
If you have bugs, please call me and don't stress for it!
I will back laler!

The virus then displays the MessageBox:
[IVR] - Internation Virus Research
You are STREZZ now, I'm sorry for it!

Macro.Word.Stryx

Description Macro.Word.Stryx

This encrypted virus contains four macros:
NORMAL.DOT Infected files
DokumentSchließen DokumentSchließen
DateiSchließen DateiSchließen
Stryx1 StryxOne
Stryx2 StryxTwo

It infects the system on DokumentSchließen and DateiSchließen (FileClose and DocClose).
On December 1st the virus creates the FUNNY.COM DOS trojan and runs it. This trojan creates random named subdirectories on current disk. To drop that trojan the virus saves to FUNNY.SCR file hexadecimal dump and converts it to DOS executable by using DEBUG utility. To do that the virus creates and executes FUNNY.BAT file:
@echo off
debug < funny.scr > nul
@echo off
Funny.com

By using similar way the virus drops the DRACHE.GIF file with an image of a dragon. Then the virus creates new template, inserts this GIF into there and adds the strings:
STRYX!!!!
Look at your HD! :-)
Sorry, but it's so funny!
NJ 1996

Home