Macro.Access.Detox.a
Description Macro.Access.Detox.a
This virus infects MS Access databases. While infecting, the virus replaces the Autoexec script in databases and copies an additional macro named TDU to the database . This macro contains four subroutines:
TheDetoxUnit
SetStartupProperties
ChangeProperty
Info
When an infected database is opened, the Autoexec macro is activated. In infected databases it immediately calls the virus function TheDetoxUnit that searches for all databases in the current directory and infects them. While searching the virus uses the "*.MDB" mask. Before infecting the virus disables the Tools/Options menu and changes several system parameters: disables viewing macros by using hot-keys and on error while executing macros, enables executing auto-scripts when Shift key is pressed (by default pressed Shift disables auto-scripts).
The Info subroutine contains nothing but comments:
The Detox Unit Access Macro Virus
written by Sin Code IV
(an old friend by any other nameall)
Check other viruses! Be aware! Use Antiviral Software
Abraxas.Cleton.1508
Description Abraxas.Cleton.1508
This virus overwrites EXE files of current and parent directory. It creates and overwrites ROMMAND.COM file also. It displays:
EDWIN CLENTON AND I LOVE A GOOD HARD DRIVE
allAhhhh! Get a ROD just thinking about it!
It contains the internal strings also:
rommand.com
Darkest Avenger
CES (c) Controlled Environment Simulator
Edwin Cleton 1993 VirSoft (c)
Abraxas_II.2011
Description Abraxas_II.2011
This is not memory resident parasitic virus. It searches for COM files and writes itself at their ends. It draws porno picture and displays the message:
Ich bin ein Geschenk von dem Teufel
It erases C: drive sectors.
|