|
Unexpected Response
|
Possible Infectors
|
| 36146.txt file on desktop |
Bifrose.BGE |
| Anti-US slogans
are on my screen |
Caligula |
| BIOS/CMOS
settings changed to 'no hard drive' |
Melissa.ac |
| Boot Sectors:
computer will not boot
|
New
Love, Totilix
|
|
information has changed
|
boot virus, Stoned |
|
locks when I try to boot and a single
character is displayed
|
French
Boot |
|
will not boot
|
Anticmos,
Dodgy,
Emperor,
Mypics.worm |
|
very subtle random swapping of two
words
|
Jack
the Ripper |
|
Win XP reboots
|
Mblast
|
| Browser will not display major
search engines:
Alta Vista.com
Google.com
Lycos.com
MSN.com
Yahoo.com |
Delude.A |
| Browser start page changed to:
"geocities.com/SiliconValley/Vista/8279/"
"google.com"
freedonation.com de_isp.nl sureseeker.com
|
Mypics.worm
Delude.B
Cuerpo
Creepy
Sure
Seeker
|
|
Browser windows made difficult or impossible to close
|
NoClose |
| Clean boot disk
doesn't recognize partitions or Invalid drive specifications |
Monkey |
| CMOS: |
|
|
configuration information is gone
|
Anticmos |
|
information has changed
|
boot virus |
| Computer: |
|
|
"beeps"
|
Bablas,
Vacsina |
|
backlight goes on and off to drain
battery
|
Lights |
|
is gradually slowing down
|
boot virus |
|
is playing "Yankee Doodle
Dandy"
|
Vacsina |
|
is playing hymn of former Soviet Union
|
Zhymn |
|
is sounding alarms
|
Alarm |
|
Fireworks displayed on screen
|
Happy
99 |
|
"hangs"
|
Frodo,
Parity
Boot |
|
insists on closing the document I am
using
|
Alien |
|
displays picture of a peach
|
Prune |
| Data changed
after I pressed "Ctrl-Alt-Del" |
AntiCAD |
| Data-Corrupt |
Andryushka |
| Data (all) lost
in Win 95 & 98 |
CIH |
| Data overwritten
for files with .doc, .xls, .ppt, .asm, .cpp, .c, .h extensions
|
ExploreZip_E |
| Data overwritten
on local and network files on July 6. |
Klez_E |
| Date of some
files is 100 years ahead |
Apocalipse |
| Date changed to
04-08-1981 |
Numgame |
| Documents are
posted at a usenet/newsgroup board |
Poly
Poster |
| Email: |
|
|
was sent in my name from my computer
to: babylonia_counter@hotmial.com
MAILME@SUPER.NET.PH
|
Babylonia
Love
Letter |
|
sends 'Happy Birthday' email to
address books between July 11 and 31
|
Win
Ext |
|
from bill@microsoft.com
|
Sobig.C |
| .EXE file will
not execute or copy clearly |
CMOS4 |
| Files added: |
|
|
to C:\Windows\Favorites\Lucky2000.URL |
Lucky |
|
to C:\Windows\Favorites\SEXXX. Teen
\Make BIG Money
\6544 Search Engine Submissions |
Fortnight |
| Flash BIOS
corrupt |
Kriz |
| Floppy and ROM
drives are not recognized |
Int40 |
| Repeatedly opens the CD/DVD door |
Agent.DPL
|
| German macros
programs are suddenly different |
Schuman |
| Hard Drive: |
|
|
allows unauthorized access to C:\
|
Silver,
trojans |
|
computer shuts down when date is Dec 1, 2004 or later.
|
MyDoom.AC
|
|
data gone on all hard drives
|
Smash |
|
can not access
|
Baboon |
|
files deleting
|
Yarner |
|
autoexec has changed
|
Friend
Mess |
|
autoexec.bat is replaced with
"This should be your Autoexec file. . ."
|
Cartman |
|
"vine. . .vide. . .vice. .
.Moslem Power Never End. ."
|
Cybernet |
|
"Your Computer is NOT Y2K
Compliant! Sorry..."
|
Fool |
|
c:\ data deleted
|
Backhand,
Inst
98, San,
Totilix |
|
files deleted on c:\, a:\, b:\, d:\
|
Simpsons |
|
windows is deleting
|
Feliz |
|
data rewritten
|
CIH,
ExploreZip_E,
Kriz |
|
is destroyed
|
Anthrax,
AntiMIT,
Sux |
|
reformatted itself
|
Black
Monday, DrWhite,
Fall,
Junkie,
Kill
Once, Lenni,
Mypics.worm,
Prilissa,
Redesi |
|
pretending to format C:\
|
Fake |
|
owner info is replaced with:
"Some
fool owns this thing"
"CyberWolf"
"Indonesian Today"
"You are a victim of the World
Trade Center"
|
Bad
Info
Cydog
Terrosist
Vote.K
|
| Key sequence
"ALT-F11" disabled |
Chack |
| Keyboard
"clicks" when key is pressed |
Form |
| Keyboard keys
display different characters |
Michael |
| Macro Toolbar
Menu: |
|
|
is gone
|
Alien,
AntiSR1 |
|
is hidden
|
Chack |
|
will not respond
|
Caligula,
Cap,
Share
Fun |
|
password needed to access
|
Protect |
|
password needed to save document
|
Protect |
| Macro Security
in MS Word 2000 disabled |
Melissa |
| Mouse cursor
looks like a syringe |
Harry |
| Mouse cursor in
Windows looks like a red cross |
Armagid |
| MS Office 97
Access Database is doing strange things |
Accessiv |
| MS Windows 95/98
shut down |
Kak |
| MS Windows will
not boot |
FF |
| Partition is
scrambled |
boot virus |
| Ports |
|
|
COM1 & LPT1 suddenly do not work
|
Azusa |
| Printer added to
the end of my document: |
|
|
"And finally I would like to say:
STOP ALL FRENCH NUCLEAR TESTING IN THE PACIFIC"
|
Nuclear |
|
picture of a woman at the end of my
Word 97 document
|
Hubad |
| Programs: |
|
|
are deleting when executed
|
Jerusalem |
|
already destroyed begin with
"@AIDS"
|
Vienna |
| Screen: |
|
|
desktop wallpaper changed to
pornographic scene
|
Bearded |
|
flashing document files
|
Green
Stripe |
|
has "falling" characters
black square bounces around screen
|
Fall
Alone |
|
blank when computer is turned on
blank when computer is turned on and A:\ is not accessible with possible
system freeze
|
CIH,
Dodgy
QZap160
|
|
has a black rectangle
has blue icon in system tray
|
Jerusalem
Navidad |
|
shakes
flashes insulting messages
makes alarm sounds
Palm OS show a dark gray box
|
Praque,Yaha_E
Ghost
Alarm
Phage
|
|
"squeezed" every couple of
hours
|
Alex |
| Screen has
moving objects: |
|
|
ambulance with siren
|
Ambulance |
|
one or more red crosses in white
circle
|
Marburg |
|
green caterpillar
|
Green
Caterpillar |
| System date
changed to January 1, 1980 |
Backhand.A |
| System files are
disappearing |
Always,
Friend
Mess |
| Text is inserted
into document: |
|
|
"Make me better! The Bad Boy
virus."
|
Bad
Boy |
|
"Hint: Get Norton 2000 not
McAfee 4.02"
|
Melissa-V |
|
the word "its" replaced with
"it's" in documents
|
Green
Stripe |
|
as footer line: "J972/nagvZNEP
ol Ybeg Angnf [Pbqroernxref 98]"
|
AntiMARC |
|
"***k you & shave your mama
p*****."
|
Melissa-Y |
|
"HOLA SOY NICOLE"
|
Destino |
|
"Kesseler Word 97 Macro"
|
Passbox |
|
"Loading. . .No"
|
Melissa-U |
|
"This ain't a new virus. . .it's
my new game, ***hole!"
|
Melissa-Y |
|
"Vaccination to get rid of the
Night Shade word macro. . ."
|
Laroux.BP |
|
"Works in Word 2000, Word 97
& your f***en ***!"
|
Melissa-Y |
|
"Worm?Macro Virus?Word 97 Virus?
Word 2000 Virus? You Decide"
|
Melissa-Y |
|
Text appears on screen:
|
|
|
"A kuku, Nestephy komornik!!"
|
Akuku |
|
"Alert..!! Your Pc have a
serious problem with the Year 2000"
|
Lenni |
|
"Alfons! Synchronizing Drive c:
(Do not interrupt this operation!): 100% Done."
|
Alfons |
|
"ALPHA STRIKE Advanced Tactical
Viral Implant by NEUROBASHER '93/ Germany"
|
Alpha
Strike |
|
"[Alphabetic.A (c) Alpha
1994.]"
|
Alphabet |
|
"And Hope You'll Learn from It
Too"
|
Michael |
|
"[Anna] Slartibartfast, ARCV
NukE the French. Have a cool. . ."
|
Anna |
|
"Anxiety.Poppy.II by VicodinES.
. ."
|
Anxiety |
|
"Any Problem? Call Mr.BoND,
OkEmi ThanK U"
|
Bond |
|
"April 1st HA HA HA You Have A
Virus"
|
AntiD |
|
"Arf! Arf! Got you!"
|
Vienna |
|
"Arusiek"
|
Arusiek |
|
"AVALANCHE/Germany '94. . .MetalJunkie
greets Neurobasher"
|
Avalanche |
|
"Bloody! June 4, 1989"
|
Stoned |
|
"Bpp Hacker is now
activating"
|
Praque |
|
"Campana Anti-TELEFONICA
(Barcelona)
|
Spanish
Trojan |
|
"Cannot open file: it does not
appear to be a valid archive. If this file is part of a zip format
backup set, insert the last disk of the backup set and try again. Please
press F1 for help."
|
Explore
Zip |
|
"Cannot open file: it does not
appear to be a valid archive. If you download this file, try downloading
the file again."
|
Cholera |
|
"Chantal 4ever!"
|
Chantal_A |
|
"CMOS Checksum Invalid"
|
Mypics.worm |
|
"Configuration conflict - menu
item is not available"
|
Switchr |
|
"Could not attack" (a file
name)
|
Trojan.Attack |
|
displayed scrolling in MS Word
Status Bar: "DOEUNPAD94, v.2.21, (c)Maret1996, Bandung,
Indonesia"
|
Npad |
|
displays message referring to
University of East Manilla
|
Sampo |
|
"Destroyed by Vienna.
Reboot"
|
Vienna |
|
"DOS/46W Professional Protected
Mode Run. . ."
|
Always.2000 |
|
"Driver Memory Error!
Kagoo-Anti-Kro$oft says not today!"
|
Kak |
|
"Eddie lives. . .somewhere in
time."
|
Dark
Avenger |
|
"Error54: Media Player not
installed correctly"
|
Lilac |
|
"Fatal Error in Windows Kernell
Please allow a 10 MINUTEs acces. . ."
|
Cydog |
|
"FRODO LIVES"
|
Frodo |
|
"Happy Birthday, Joshi"
|
Joshi |
|
"Happy Birthday Shankar"
(big green letters)
|
Marker.O |
|
"Have a nice day! It's Friday
13th! This is my lucky day, I hope it's yours too!"
|
Backhand |
|
"HDEuthanasia by Demon Emperor.
. ."
|
Hare |
|
"Hello!!! My name is Andryushka.
I come from Perm, USSR."
|
Andryushka |
|
"Hi! laurie lantar lassi
surimen!. . ."
|
Galadriel |
|
"HUM4N GOD THA7 WAS MAN-MADE
WH3RE 1s YOUR SAVIOR NOW"
|
Savior |
|
"I am Li Xibin"
|
Anticmos |
|
"I'm not feeling very well. . .AAARGHH!!!"
|
Argh |
|
"I want a COOKIE!"
|
Sys
Lock |
|
"I will grind my hatred upon
the loved ones. . ."
|
Emperor |
|
(user) "is a Big, Stupid
Jerk"
|
Jerk |
|
"", It's GROOVIE""
|
Groovie |
|
"Jane! Jane!
Jane!" in endless loop
|
Melissa.Z |
|
"Loader Error - API not
found!"
|
Babylonia |
|
"Look out for the
RENAME-PROBLEM!"
|
Breeder |
|
"Lord of the Rings"
related text
|
Frodo |
|
"Macro virus has been spread.
Now execute some other code (good, bad, or indifferent)."
|
DMV |
|
"Mark says
ChantalB.4ever!"
|
Chantal_A |
|
"message from "www.all.net"
|
Jerk |
|
"Michael Learns to Hack"
|
Michael |
|
"Microsoft Excel has detected a
corrupted add-in file. Click 'OK' to repair this file."
|
Sofa |
|
"Millenium Virus"
|
Lenni |
|
"MK-Words by MMK 1999. Welcome
to Y2K."
|
Mmkv |
|
"NAENBGOURSG Hello from
Greece"
|
Angus |
|
"Nesedte porad. . ."
|
Helloween |
|
"Nightbird goes, Along with the
Queen. . ."
|
Nightbird |
|
"No code too see! (typo)"
|
Jany
2000 |
|
"Out of Memory Error. Please
reboot."
|
Trojan.Attack |
|
"PARITY CHECK"
|
Parity
Boot |
|
"Program sick error: Call
doctor or buy PIXEL for cure description."
|
Amstrad |
|
"Red State, Germ Offensive,
AIRCOP"
|
Aircop |
|
"Requires More Memory To
Run"
|
Trojan.Attack |
|
"R.SY"
|
Alcon |
|
"Software copies prohibited by
Internatonal Law Box 1055 Tuscambia, Alabama USA"
|
Alabama |
|
"Sorry. I'm copmpletely
dead."
|
Copmp |
|
"Sorry. . .MIMIR has infected
your PC. . ."
|
Mimir |
|
"Strange Days by
Reptile/29A"
|
Strange
Days |
|
"System error, delete "UPDATE.HTM"
from the startup folder to solve this problem."
|
Bubble
Boy |
|
"T. Tequila" and a Swiss
P.O. Box #
|
Tequila |
|
Thank You! I Love You. You are
Wonderful."
|
Marker.O |
|
"Thank's for joining with us!
""
|
Rapi |
|
"The technology will be kill
humaneness."
|
Arbeit |
|
"This is a vaccination response
to the Night Shade Word Macro. . ."
|
Laroux.BP |
|
"This is Class. . . VicodinES.
. ./CB. . ./TNN"
|
Class |
|
"This item is not available.
Please insert the MS Office CD and install the help files to
continue."
|
Talon |
|
"This program has performed an
illegal operation and will be shut down."
|
Class.ed |
|
title of File Summary box displays
"Ethan Frome"
|
Ethan |
|
"TOTILIX Presents. . .
This >TOTILIX<Virus was assembled. . ."
|
Oporto
3078 |
|
"Traveller (c) BUPT 1991.4
Don't Panic I'm harmless"
|
Bupt |
|
"Updating! This may take a
while. . .Please Wait. . ."
|
Reizfactor |
|
"Virus Alert" (appears
when you load a page on the internet)
|
Crackbox
|
|
"Virus Warning! Your computer
has been infected by virus. Virus name is 'SMASH',". . ."
|
Smash |
|
"(c) 1999-CyberNET Vire.
. . Vide. . . Vice. . . You Dare Rise Against Me. . . The Human Era is
Over the CyberNET Era has come!!! [OK]"
|
Prilissa |
|
"Water was detected in your
microprocessor. The functioning may be compromised! It is recommended to
shut down the computer a few hours to get dry!"
|
Alexander |
|
"Welcome to BUPT 9146,
Beijing!"
|
Welcomb |
|
"Windows NT required! This
program will be terminated."
|
Babylonia |
|
"Windows Protection Error"
|
Niknat |
|
"You are Heart Less. You will
be punished for this."
|
Marker.O |
|
"You have been bearded."
"You will not forget this moment. Never!"
|
Bearded
Forgoten |
|
"Your computer is now
stoned."
|
Stoned |
|
"Your document has been
corrupted because of a bug in Word! Call Microsoft. . ."
|
Backhand.A |
|
"Your Internet Connection is
already Y2K, you don't need to upgrade it."
|
Fix
2001 |
|
"Your PC is now STONED!"
|
New
Zealand |
|
"Your System is infected with
the Macro Virus Talon #1"
|
Talon |
|
"Zacker
No Peace without war,i hate war but i'm forced to
love it. Hiiden Power's gonna b there wherever u r
|
Galil
|
| Text appears on
screen but these indicate that BIOS is alright but hard drive data is
gone. |
|
|
"boot error message"
|
CIH |
|
"error
Application initilisation error"
|
Yaha_J |
|
"error in CMOS"
|
Emperor |
|
"insert bootable media"
|
CIH |
|
"insert system disk"
|
CIH |
|
"non-sytem disk or disk
error"
|
WYX,
BootEXE |
|
"Halt the PC and erase all files
on the hard disk"
|
Dodgy |
|
"parity check"
|
Parity
Boot |
|
"parity error"
|
Amstrad |
|
Tools Macro in Word 97 disabled
|
Melissa |
| Tools/Macro and
Tools/Options menus are gone |
Hope,
Michael |
|
Windows:
|
|
|
Program Manager is hidden
|
Alien |
|
Computer insists on closing Windows
Username changed to 'Evil Santa'
Username changed to 'alcopauls.ph'
|
Alien
Mill
Alcarys |
|
Word insertion in macros document
|
|
|
sattelite
|
Sattelite
v1.5 |
|
wazzu
|
Wazzu |
|
'file properties summary'
information at end of document is changed
|
Marker |
| Wallpaper is
of a naked girl |
Niknat |
| Word 97 font
changed to: |
|
|
Webdings |
Marker.AQ |
| Word 97 user
addresss changed to: |
|
|
JonMMx2000@yahoo.com |
Marker.BO |
| Word 97 user
choices deleted: |
|
|
Close, Exit, New, Open, Page Setup,
Print, Print Preview
|
Class.ed |
|
Word 97 user name changed to:
Ginseng Boy 2000
|
Jer |
|
I lovel You, Min
|
Jer |
|
JonMMx2000
|
Marker.BO |
|
NoWorkInc
|
Arbeit |