Virus Database

DBCE.3403

Description DBCE.3403

DBCE.3403 is a not dangerous memory resident encrypted parasitic virus. It hooks INT 8, 9, 21h and writes itself to the end of COM- (except COMMAND.COM) and EXE-files that are executed. On typing "virus" on the keyboard, the virus replaces it with "clankswerk", it also changes the "virus" string to "clank" on the screen. It contains the internal text strings:
COMMAND.COM
[DBCE]

and displays the messages:
Amidst Dale Beaudoin's
driveling
clank clunking crap
rubishy rubish
the following wisdom spews forth:
You have the Dale Beaudoin Clankswerks Engine by pseudoVirus writer Virotech!
This crude clankswerks was quickly and sloppily put together just like
Dale's Fido messages.
In my assesment there is ways and means to break new ground in the
computer sciences. virus not= virus. virus = clankswerks engine!
A "virus" or "trojan" that attempts to do a DIRECT WRITE bypassing the
operating system is not a virus. It is a mathclanking engine.
The clankswerks "appears" to have a measure of stealth by passing DOS but
the intent is more deliberate than stealthy. The "formula" or "equation"
is designed with a directive.
PseudoViruses deliberately mathclank other software programs. They are
not true viruses.
Computer "virus" (clankswerks) do not replicate, they iterate,
decrementally and incrementally through a math engine dependent on a
specific order of operations.
RPM is not software intergrated. IDE drives I have worked with often
have the platter scored after subject to a clankswerks. If the controller
would to do a seek in a tight loop the harmonics would be enough to allow
the heads to crash through the air-bearing.
The purity of the overall engine is mathclanked by the deliberate
alteration of one of the subsets. That alteration is dependent on the
works of an human idiot math-clanker. It is illegal and not natural.
Any so called virus that can take instrucution to lift attributes has to
be artificially intelligent.
If a pseudoVirus consults the COMSPEC to find the original copy of
COMMAND.COM, all you have to do is use debug and rename COMSPEC and
COMMAND.COM. Change the varialbe and tell your virus to decipher it! If
it does consult or decipher then it's AI, not virus.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Italian.a

Description Macro.Word.Italian.a

Italian.a
This is an Italian Word specific virus. It does not replicate itself under any other original or local Word version. It contains three macros:
in NORMAL.DOT in infected files
FileSalva FileMacro
WordMacro1 FileChiudi
WordMacro2 FileEsci

On 7, 13, 17 and 31 of any month it displays the message (MessageBox):
C Y B E R L O R D !!
Your PC is infected by
Word.Macro.ITALIAN Virus
Written Jan,1996.

Italian.b
This is an encrypted Italian Word macro virus. It contains three macros: AutoOpen, NoMercy, AutoClose. The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are closed (AutoClose).
On entering Tools/Macro menu the virus displays the MessageBox:
-=foxz NoMercy Members=-
This Italian Virus is Made In Indonesia
Virus Name: Etna
NoMercy Product '97

The virus contains the commented text:
--------------------------------------------
a virus from NoMercy but Italian Version!
created on Yogyakarta, Indonesia
Jun 97 by foxz@biosys.net
Dedicated to my friend in Italia "D.Giovanni"
--------------------------------------------

Macro.Word.Ivana

Description Macro.Word.Ivana

The virus contains seven macros: Bold, Ivana, EditUndo, AutoClose, Underline, ToolsMacro, FileTemplates. It replicates on the documents closing.
If system time seconds value is less than 15, the virus cancels undoing (Edit/Undo calls). On Sunday the virus hides the Formatting ToolsBar, on Monday it hides the ScrollBar.
On 13th of any month the virus adds the text to the end of documents:
Na kraju, samo jos da kazem: volim te, Ivana [by utik]
And finally, I would like to say: I love you, Ivana [by utik]

On July 4th it writes the string "Ivana" to the end of the current document and sets the same password on the document.
The "Ivana" macro contains the comments:
Dedicated to Ivana, the only one
[by utik]

Home