Virus Database

Arara Family

Description Arara Family

These are harmless nonmemory resident parasitic polymorphic viruses. They searches for COM files and writes themselves to the end of the file. They contain the texts:
ILASA MICALAZODA OLAPIRETA IALPEREJI BELIORE: DAS ODO BUSADIRE OIAD OUOARESA
CAOSAGO: CASAREMEJI LAIADA ERANU BERINUTASA CAFAFAME DAS IVEMEDA AQOSO ADOHO
MOZ, OD MAOFASA. BOLAPE COMO BELIORETA PAMEBETA. ZODACARE OD ZODAMERANU! ODO
CICALE QAA. ZODOREJE, LAPE ZODIREDO NOCO MADA, HOATHAHE SAITAN!

and
"Arara.1038": [ARARA]
"Arara.1375,1391": [ARARA2]

Check other viruses! Be aware! Use Antiviral Software

Macro.Excel.Soldier

Description Macro.Excel.Soldier

This is a polymorphic macro virus. It contains four actual function: Auto_Open, Auto_Close, Delay, Poly, as well as random number of junk functions with random names.
On closing an infected file the virus searches and infects files in the current directory. While infecting the virus depending on system random counter inserts into the top of its code functions with random name and random contents (polymorphic).
On opening an infected file the virus erases menu items Format/Sheet/Hide and Format/Sheet/Unhideall (stealth).
Depending on random counter the virus displays to the Excel caption the running line:
Microsoft Excel

Macro.Excel.Spellcheck

Description Macro.Excel.Spellcheck

This virus infects Excel sheets. It contains only one module "MSExcel" with six functions: Auto_Close, Auto_Open, HasAddIn, RepeatInfect, Infect, Payload.
While opening an infected file the virus function Auto_Open takes control and infects the system: it creates the infected SPELLCK.XLA file in the Excel startup or alternate startup directory. The virus also creates the infected Add-in file. The virus pays attention to the environment and creates infected files in directories that are specific for MacOS and Windows.
The virus displays the MessageBoxes:
Thank you for using Microsoft Excel!
Just in case you didn't know, the current date is:
<date>

It also contains comments:
Date Virus.
Created: May 1, 1996.

NOTE:
The Date Virus was inspired by the Laroux virus. While this particular
macro virus is harmless, others are not! This macro virus was developed
to bring attention to the possible threat in the hopes that antivirus software
will be developed to protect this application.

Home