Macro.Access.Lovely
Description Macro.Access.Lovely
This virus infects MS Access databases. While infecting the virus replaces in databases the Autoexec script and copies to database additional form named "Jo". This form contains a module with one function "Jg".
When infected database is opened the virus searches for all databases in the current directory and infects them. While searching the virus uses the "*.MDB" mask.
Before infecting the virus changes several system parameters: disables viewing macros by using hot-keys and on error while executing macros. The virus does not have any payload procedure.
The virus contains the "copyright" text:
Copyright (C) 1998 by FlyShadow ~^^~ - Lovely
Check other viruses! Be aware! Use Antiviral Software
SI.509
Description SI.509
It is a dangerous memory resident parasitic virus. It hooks INT 1Ch, 21h, intercepts DOS calls Create/Remove/Change Directory, Create/Open File and on these calls search for .COM files in the current directory, then writes itself to the end of the file.
To detect its TSR copy the virus writes ID-word "SI" to the BIOS data area at the address 0:0472 (Warm boot flag). At 10:00 the virus reboots the computer. The virus contains the text:
*.COM
Sibylle
Description Sibylle
It is a dangerous memory resident parasitic virus. It hooks INT 21h, 2Fh and writes itself to the end of EXE files that are executed. By hooking INT 2Fh the virus detects its already installed TSR copy. Sometimes it set the file attribute to Volume Label value. Depending on the current time this virus overwrites the AUTOEXEC.BAT with the strings:
@echo off
:b
echo Looking for Sibylleall
goto b
|