Virus Database

Kernel.608

Description Kernel.608

It is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of .COM files that are executed. On June, 8th it erases the hard drive sectors and halts the computer. It contains the word "KERNEL" and encrypted string:
Dedicated to tfe 13021 lost sheep. Please God, do help them.

Check other viruses! Be aware! Use Antiviral Software

Macro.Excel.Soldier

Description Macro.Excel.Soldier

This is a polymorphic macro virus. It contains four actual function: Auto_Open, Auto_Close, Delay, Poly, as well as random number of junk functions with random names.
On closing an infected file the virus searches and infects files in the current directory. While infecting the virus depending on system random counter inserts into the top of its code functions with random name and random contents (polymorphic).
On opening an infected file the virus erases menu items Format/Sheet/Hide and Format/Sheet/Unhideall (stealth).
Depending on random counter the virus displays to the Excel caption the running line:
Microsoft Excel

Macro.Excel.Spellcheck

Description Macro.Excel.Spellcheck

This virus infects Excel sheets. It contains only one module "MSExcel" with six functions: Auto_Close, Auto_Open, HasAddIn, RepeatInfect, Infect, Payload.
While opening an infected file the virus function Auto_Open takes control and infects the system: it creates the infected SPELLCK.XLA file in the Excel startup or alternate startup directory. The virus also creates the infected Add-in file. The virus pays attention to the environment and creates infected files in directories that are specific for MacOS and Windows.
The virus displays the MessageBoxes:
Thank you for using Microsoft Excel!
Just in case you didn't know, the current date is:
<date>

It also contains comments:
Date Virus.
Created: May 1, 1996.

NOTE:
The Date Virus was inspired by the Laroux virus. While this particular
macro virus is harmless, others are not! This macro virus was developed
to bring attention to the possible threat in the hopes that antivirus software
will be developed to protect this application.

Home