Virus Database

Dy.278

Description Dy.278

It's a not dangerous not memory resident parasitic virus. It searches for COM-files and writes itself to their beginnings. On infection of each file it decreases the size of free memory. It contains the identification text string: "DY".

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Nostradamus

Description Macro.Word.Nostradamus

This Italian Word macro virus contains three macros: MacroOnFile, StrumMacro, AutoOpen. The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved (MacroOnFile - in NORMAL.DOT this macro has the name FileSalva).
This is the stealth virus - it draws its own Dialog (in Italian) on entering Tools/Macro menu.
On 31st the virus displays the MessageBox:
NOSTRADAMUS Virus
Barbaro impero dal terzo sarai soggiogato,
Gran parte d'individui della sua origine far perire:
Per decesso senile avverr la sua fine, il quarto colpir
Per timore che il sangue con il sangue morte ne derivi.
Centuria 3., LIX

Macro.Word.Nostradamus family

Description Macro.Word.Nostradamus family

This Italian Word macro virus contains three or four macros depending on the virus' version:
"Nostradamus.a": MacroOnFile, StrumMacro, AutoOpen
"Nostradamus.b": MacroOnFile, StrumMacro, AutoOpen, FileModelli

While infecting the NORMAL.DOT the virus copies the MacroOnFile macro with the the FileSalva name.
The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen), and writes itself to documents that are saved (FileSalva).
This is the stealth virus: on entering Tools/Macro and File/Temlates menus it draws its own Dialogs (in Italian).
On 31st of any month the virus displays the MessageBox:
NOSTRADAMUS Virus
Barbaro impero dal terzo sarai soggiogato,
Gran parte d'individui della sua origine farà perire:
Per decesso senile avverrà la sua fine, il quarto colpirà
Per timore che il sangue con il sangue morte ne derivi.
Centuria 3%, LIX

Home