Virus Database

DenZuk.a

Description DenZuk.a

These are dangerous viruses, 9 sectors long. They infect floppy disks Boot-sectors during access (INT 13h, ah=2,3,4,5). The viruses make no check when place their second parts on a disk, so they can destroy some information at the 40th track.
The viruses hook INT 9, 13h. On a warm reboot they display their name "Den Zuk" in big letters (graphics video mode). The viruses replace the label of the infected disk with "Y_C_1_E_R_P". They don't have a destructive function, but they are dangerous because of the possibility to erase information at the 40th track of the infected disk. The viruses contain the text: "Welcome to the C l u b --The HackerS-- Hackin' All The Time", "The HackerS".

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Slot

Description Macro.Word97.Slot

This virus in one module "SLOT" contains six macros: autoopen, slots, FileTemplates, autonew, autoclose, ViewVBcode. It replicates itself on creating new document, opening or closing.
On entering the Tools/Macro or Tools/Templates menus it displays the message:
Warning!!
That option is not installed, please install the HELP files to continue

The virus also sets the "SLOT" password for documents and plays a game: displays MessageBoxes, waits for input, compares input with three-digits random number and depending on it displays more MessageBoxes:
Macro Slot Game for Word97
Today is [current date] let's play a SLOTS game.
Try your luck! Your lucky numbers are..
Macro Slot Game for Word97
Bingo ! You win .
Macro Slot Game for Word97
Try to input the password or play again!
Macro Slot Game for Word97
Hey ! You can't do that. You must input the
right numbers or push the cancel button.
Macro Slot Game for Word97
OK !

Macro.Word97.Smac

Description Macro.Word97.Smac

This is a polymorphic macro-virus. It infects the global macros area on opening an infected document, and spreads itself to documents that are closed. The virus was named after one of its internal variables - "Smac".
The virus has stealth abilities, and on entering the ViewVBCode menu, it displays the message:
Illegal function in module 0xCB15C00

The virus contains six macros in one module "cb4111": AutoOpen, AutoExec, ViewVBCode, Do_The_Thing, AutoExit. The virus also has the Morph function that is used in virus polymorphic engine.
While infecting the NORMAL.DOT (global macros area), the virus also creates the infection AutoClose macro in there.
The virus contains the comments:
ThE wEiRd GeNiUs is back!
Greetings to the Codebreakers, VicodinEs & Lord Natas and to ALT-F11
Thanks for the cb4111 guide.
Until the next bug, greetings, WG

Home