Formula.Excel.Sic.e
Description Formula.Excel.Sic.e
This is one of the few macro viruses which does not use macros to penetrate Excel tables, which is the usual method. Instead it uses formalas.
It is impossible to detect this virus using a normal method (by viewing macros), because the virus ascribes the attritube VeryHidden to its module; this characteristic cannot be detected from an Excel menu.
The virus infects MS Excel tables when they are opened and closed.
The virus itself is one macro with two functions, Auto_Close and Auto_Open.
It contains several variables:
_Fill
Bust
Continue
Document_array
Documents_array
Hello
MakeIt
Morning
TaxTV
TaxXL
Test5
When it infects tables, it creates a hidden page called XL4Test5 where it saves its code.
It also creates an infected file called Book1 in the autorun catalogue.
Check other viruses! Be aware! Use Antiviral Software
Kode4.281
Description Kode4.281
These are harmless nonmemory resident parasitic viruses. They write themselves to the end of all .COM files of the current directory. They contain the text string:
-=+ Kode4 +=-, The one and ONLY!
"Kode4.399" is a very dangerous virus. Sometimes it erases the disk sectors and displays the same message. It also corrupt the files while infecting them, these files cannot be disinfected.
Koder.1024
Description Koder.1024
This is a dangerous memory resident partly encrypted parasitic virus. It hooks INT 21h, and writes itself to the end of EXE files that are executed. While opening an infected file, or while accessing to an infected file with FindFirst/Next DOS functions, the virus decreases the file length. Starting in September, the virus corrupts the CMOS check-sum field. The virus contains the text string:
KODER(96) WROCLAW
|