Virus Database

DeathDragon.499

Description DeathDragon.499

This is a benign non-memory resident partly encrypted parasitic virus. It searches for .COM files, and writes itself to their ends. Depending on the system date, it displays a message and halts a computer:
Warning 3456:5432 : computer over worked - Shut down for 24 hours

It contains the additional internal text string:
[* DèAtH DrÅgOn *]
c:command.com *.com

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Shuffle

Description Macro.Word.Shuffle

This is a stealth Word macro virus. It contains one macro in documents (AutoOpen) and four macros in NORMAL.DOT (XXXXX, FileSaveAs, ToolsMacro, FileTemplates).
The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved with new name (FileSaveAs). The virus infects the documents in usual way, while infecting the NORMAL.DOT the virus deletes all macros in there, minimizes the Word window, and copies its macros string-by-string to the global macros area.

Macro.Word.Sidor

Description Macro.Word.Sidor

This macro virus contains five macro in documents: AutoOpen, FileClose, FileTemplate, mir, ToolsMacro (stealth). In NORMAL.DOT It contains seven macros: AutoExec, ToolsMacro, FileTemplate, FileSave, FileSaveAs, fucker, sokker.
The virus infects the global macros area on opening an infected document and copies itself to other documents on saving or saving with new name. While infecting the virus uses anti-heuristic trick: it creates four temporary macros, writes infection routines to there, executes these macros and then deletes them.
The virus contains the comments:
Write by Sidorov Konstantin Matveevich, 73 years old, der. Vioshki,
Moscowskaya obl.
Sorry me, old grandfather, for some errors

Home