Virus Database

Dark.1016

Description Dark.1016

These are very dangerous non-memory resident parasitic viruses. They search for COM (except COMMAND.COM) and EXE files, then write themselves to the end of the file. On Mondays, if it is the 16th day of the month, the viruses overwrite the boot sector of the current drive with a Trojan program that reboots a computer when executed; then the viruses display the following message:
Welcome to the Dark Apocalypseall Your computer will
never escape... You might as well read this and weep!
The Dark Apocalypse v1.00 by Crypt Keeper [RoT]
TTReign of TerrorTT [DARK APOCALYPSE]
Press any key to continue...

and print the screen by a INT 5 call, and reboot a computer. These viruses also contain the text strings:
COMMAND.COM *.EXE *.COM

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Bertik

Description Macro.Word.Bertik

This is an encrypted macro virus. It contains four macros that have different names in infected documents and NORMAL.DOT:
Documents NORMAL.DOT
AutoOpen YYYAO
XXXAO AutoOpen
XXXFSA FileSaveAs
XXXFS FileSave
PayLoad PayLoad

The virus infects the system on opening an infected document (AutoOpen) and writes itself to other documents on opening and saving (AutoOpen, FileSave, FileSaveAs).
On each infection the virus copies the WINWORD.HLP file to TEMPLATES .WRD file, where 'n' in number of infection. In case of error the virus displays one of MessageBoxes:
DúleOitè upozornini
!!! Tohle zpùsobil virus Bertik.1 !!!
!!! Made by virus Bertik.1 !!!

Macro.Word.Bilbo

Description Macro.Word.Bilbo

This macro virus contains six macros: FileOpen, FileSave, FileExit, AutoOpen, AutoExec, and Bilbo. It infects the documents and global macros area on FileSave and AutoOpen. Starting from the 10th of each month, this virus, on AutoExit, displays a MessageBox with the following text:
Bilbo Baggins was here!

Home