RedCrossAntivirus carries out the following actions: When it is run, it connects to the website http://85.231.174/inst.php?id=and the program starts its installation. The following images belong to the installation pr... [More]

This is a encrypted virus containing 7 macros:NORMAL.DOTInfected files AutoExecAutoClose FileSaveAsToolsMacro ToolsMacroMicrosoft01 Microsoft05Microsoft02 Microsoft04Microsoft03 Microsoft02Microsoft04 Microsoft01Microsoft05It seems that the virus aut... [More]

This virus contains 3 macros:DocumentsNORMAL.DOT AutoOpenao fsFileSave fsaFileSaveAsThe virus infects the system area on opening an infected document (AutoOpen). It infects documents that are saved (FileSave) or saved with new name (FileSaveAs). The ... [More]

This is an encrypted macro virus. It contains two original macros that have different names in infected documents and NORMAL.DOT:DocumentsNORMAL.DOT AutoOpenFileSave FileSaveAsFileSaveAsThe virus infects the system and documents on opening and saving... [More]

This is an encrypted macro virus. It contains two macros that have different names in documents and NORMAL.DOT:DocumentsNORMAL.DOT AutoOpenAutoExec PrezentItFileSaveAsThe virus infects the system on AutoOpen call and writes itself to documents on Fil... [More]

This encrypted macro virus contains four macros, it replicates on closing documents (AutoClose):DocumentsNORMAL.DOT EvaHzgEvaHzg AutoCloseDCloseAN FileTemplatesFileTemplates, ToolsMacro TCloseANAutoCloseOn October 23 the virus creates the EVAH.BMP fi... [More]

This macro virus does not manifest itself in any way. It contain two macros in infected documents and NORMAL.DOT:DocumentsNORMAL.DOT ------------------- AutoCloseHi ACAutoCloseThe virus copies itself to the global macros area and to documents on file... [More]

This macro virus contains only one macro named NightShade. This macro contains auto-function AutoClose that allows the virus to infect the system and documents on file closing. Depending on the system date and random counter the virus displays the te... [More]

This is encrypted macro virus. It contains three macros: AutoOpen, FichierEnregistrer, FichierEnregistrerSous. The virus infects the global macros area and documents on AutoOpen. On saving documents with new name it displays the MessageBox:Une erreur... [More]

This virus is based on Word.Macro.Concept virus. It contains four macros:in NORMAL.DOTin infected files PayLoadPayload AutoExitAutoExit VOpenAutoOpen AutoCloseVClosePayload macro contains the same text as "Word.Macro.Concept":That's enough to prov... [More]