These are encrypted viruses, they contain the macros:"Theatre.a": ToolsMacro, DocClose, FileClose, AutoOpen, CK "Theatre.b": ToolsMacro, DocClose, FileClose, AutoOpen, CK, CK1On 1st ("Theatre.a") or on 15th ("Theatre.b") of any month they del... [More]

The virus contains two macros: AutoOpen, TheEraser. It replicates on documents opening (AutoOpen).On the 5th of any month it erases the files:C:\Windows\*.exe C:\Windows\*.com C:\Windows\*.sys C:\Dos\*.exe C:\Dos\*.com C:\Dos\*.sys C:\Do... [More]

This is an encrypted macro virus. It contains three original macros, but while infecting it copies it with 8 different names to global macros area and with 4 names to documents. While copying the virus selects random name to hide its macros:Documents... [More]

This macro virus contains only one macro AutoClose and replicates on closing a document. While infecting the virus saves the "backup" copy of document to the O:\COMPSERV\TESTAREA directory and saves the "report" information to the LOG.VRS file ... [More]

It is an encrypted virus. It contains seven macros:AutoExec - infects the global macros area AutoOpen - calls AutoExec (infects global) DateiNeu - infects a document (FileNew) Telefonica - virus ID macro and trigger routine, is called from AutoExec a... [More]

This macro virus contains four macros that have different names in documents and NORMAL.DOT:DocumentsNORMAL.DOT TempAutoExecAutoExec TempFileSaveFileSave TempFileOpenFileOpen AutoOpenTempAutoOpenWhile loading an infected document (AutoOpen) the virus... [More]

It is a stealth macro-virus. It contains twenty procedures in one module "VrTechnoCode": VrInstall, AutoOpen, AutoExec, FileOpen, FileNew, FileNewDefault, FileSaveAs, FileSave, FileClose, DocClose, ViewVBCode, ToolsMacro, FileTemplates, ToolsOptio... [More]

This is an encrypted macro virus. It contains two macros: AutoOpen and FileSaveAs. The virus infects the global macros area on opening an infected document (AutoOpen) and writes itself to documents on saving them with new name (FileSaveAs). While ope... [More]

This macro virus affects the system on closing an infected documents and copies itself to documents are closed or saved with new name. It contains seven macros:DocumentsNORMAL.DOT AutoOpAutoOpen AutoExecAutoExec AutoCloseAutoClose UtilMacroUtilMacro ... [More]

This virus contains two macros:DocumentsNORMAL.DOT AutoOpenJua JoeaFileSaveAsIt infects the global macros area upon opening an infected file (AutoOpen) and infects documents that are saved with new name (FileSaveAs).On the 1st of each month, it displ... [More]