Virus Database

Dennis.656

Description Dennis.656

It is a benign virus. It infects EXE files that are executed. On June 20th it also hooks INT 1Ch and blinks by Num/Caps/Scroll Lock indicators.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Nostradamus

Description Macro.Word.Nostradamus

This Italian Word macro virus contains three macros: MacroOnFile, StrumMacro, AutoOpen. The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved (MacroOnFile - in NORMAL.DOT this macro has the name FileSalva).
This is the stealth virus - it draws its own Dialog (in Italian) on entering Tools/Macro menu.
On 31st the virus displays the MessageBox:
NOSTRADAMUS Virus
Barbaro impero dal terzo sarai soggiogato,
Gran parte d'individui della sua origine far perire:
Per decesso senile avverr la sua fine, il quarto colpir
Per timore che il sangue con il sangue morte ne derivi.
Centuria 3., LIX

Macro.Word.Nostradamus family

Description Macro.Word.Nostradamus family

This Italian Word macro virus contains three or four macros depending on the virus' version:
"Nostradamus.a": MacroOnFile, StrumMacro, AutoOpen
"Nostradamus.b": MacroOnFile, StrumMacro, AutoOpen, FileModelli

While infecting the NORMAL.DOT the virus copies the MacroOnFile macro with the the FileSalva name.
The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen), and writes itself to documents that are saved (FileSalva).
This is the stealth virus: on entering Tools/Macro and File/Temlates menus it draws its own Dialogs (in Italian).
On 31st of any month the virus displays the MessageBox:
NOSTRADAMUS Virus
Barbaro impero dal terzo sarai soggiogato,
Gran parte d'individui della sua origine farà perire:
Per decesso senile avverrà la sua fine, il quarto colpirà
Per timore che il sangue con il sangue morte ne derivi.
Centuria 3%, LIX

Home