This is an encrypted Word macro virus. It contains three macros: AutoOpen, FilePrint, FileSaveAs. The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved with new ... [More]

This encrypted virus contains four macros:NORMAL.DOTInfected files DokumentSchlie遝nDokumentSchlie遝n DateiSchlie遝nDateiSchlie遝n Stryx1StryxOne Stryx2StryxTwoIt infects the system on DokumentSchlie遝n and DateiSchlie遝n (FileClose and DocClose).On ... [More]

This virus contains eleven macros in one module "Inject". It infects system and documents on run any of this macros and also changes volume label on drive C: to "Testicle". On exiting Microsoft Word it infects all documents in the current directo... [More]

This is an encrypted macro virus. It contains only one macro FileClose and infects the global macros area and documents on FileClose call. On infecting the system the virus outputs the text to the status line:Spy macro now installed... ... [More]

This virus contains two macros:DocumentsNORMAL.DOTCSFFileOpen AutoOpenCSIt replicates on documents opening. The documents->NORMAL.DOT infection routine does not have replicating instructions in its code. Instead of ordinary ways of infection, it crea... [More]

This is a polymorphic macro-virus. It contains only one macro Splash and one function AutoClose. The virus replicates itself on closing documents. On any infection, the virus randomly inserts into its text 20 lines of comments. The virus does not man... [More]

This is a Word macro virus. It contains four macros: AutoOpen, SOK, ToolsMacro (stealth), ToolsCustomize.The infection routine is placed in SOK macros, which is called by AutoOpen macro on opening a document. The virus does not infect the NORMAL.DOT ... [More]

The virus contains one macro that is names AutoOpen in documents and FileSaveAs in NORMAL.DOT. It infectthe global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved with new name (FileSa... [More]

This is a harmless polymorphic macro virus. It contains only one macro AutoClose and infects the global macros area and documents on Close call.On each infection the virus' polymorphic engine renames internal virus variables to other random selected... [More]

This is a polymorphic macro-virus. It infects the global macros area on opening an infected document, and spreads itself to documents that are closed. The virus was named after one of its internal variables - "Smac".The virus has stealth abilities,... [More]