Virus Database

Leonardo.2085

Description Leonardo.2085

It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed. The virus deletes the anti-virus databases: ANTI-VIR.DAT, FINGERP.VVF, FILES.VVL, CHKLIST.MS, *.CRC. Depending on the system time the virus displays the message:
This is Leonardo - another virus Ninja Turtle
Press any keyall.

The virus also contains the text:
Origin :Slovakia (not Hungaria or Austria)

Check other viruses! Be aware! Use Antiviral Software

Formula.Excel.Sic.e

Description Formula.Excel.Sic.e

This is one of the few macro viruses which does not use macros to penetrate Excel tables, which is the usual method. Instead it uses formalas.
It is impossible to detect this virus using a normal method (by viewing macros), because the virus ascribes the attritube VeryHidden to its module; this characteristic cannot be detected from an Excel menu.
The virus infects MS Excel tables when they are opened and closed.
The virus itself is one macro with two functions, Auto_Close and Auto_Open.
It contains several variables:
_Fill
Bust
Continue
Document_array
Documents_array
Hello
MakeIt
Morning
TaxTV
TaxXL
Test5
When it infects tables, it creates a hidden page called XL4Test5 where it saves its code.
It also creates an infected file called Book1 in the autorun catalogue.

Fowl.3072

Description Fowl.3072

It is a dangerous memory resident multipartite virus. While executing an infected file or while loading from an infected floppy disk the virus infects the active boot sector of the hard drive. The virus stays memory resident only while loading from infected disk (hard drive or floppy disk). The virus hooks INT 9, waits for DOS loading, and hooks INT 28h. Then the virus waits for the end of DOS installation procedure, allocates the block of conventional memory, copies itself into there and hooks INT 13h, 21h. Then the virus writes itself to the end of EXE files that are executed and infects boot sectors of the floppy disks that are accessed. Depending of the system date the virus erases the hard drive sectors.

Home