Virus Database

Macro.Excel.KMaster

Description Macro.Excel.KMaster

This is French specific Word macro virus related to "Macro.Excel.Laroux". It infects Excel worksheets (XLS-files). It contains two macros in module KMaster: Auto_ouvrir, check_files.
The Auto_ouvrir macro is auto-macros (auto_open) and it is executed on opening an infected file. The virus takes control and installs itself into Excel. To do that the virus created the infected file PERSONAL.XLM in the Excel StartupPath directory. To intercept sheets to infect them the virus sets its "check_file" macro (infection routine) to be executed on any sheet activation.
To detect already infected files the virus looks for KMaster module in there, then for the Feuil1 page, then for the text "Knowledge is power" at the first field of this page.

Check other viruses! Be aware! Use Antiviral Software

LoadHigh.1467

Description LoadHigh.1467

This is a dangerous memory resident parasitic and companion virus. It hooks INT 21h, and writes itself to the end of .COM files, and creates companion .COM files while executing EXE files. On February 6th, it corrupts the hard drive MBR. On June 24th, it displays the following message:
Happy Birthday !

When an infected .EXE file is executed, the virus may delete the companion part and display:
Bad command or file name

The virus also contains the string:
LoadHigh

Lobotomy Family

Description Lobotomy Family

These are a dangerous nonmemory resident parasitic viruses. They search for COM files, then write themselves to the end of the file. The viruses delete the ADINF anti-virus databases. Depending on the system time the viruses display the messages:
Lobotomy.824:
*** LOBOTOMY_ v1.1beta (c)1995 MSfVC ***

Lobotomy.966:
LOBOTOMY
RESET your machine and soon, you`ll know,
that I`m the Natural_Born_Killer all
v1.1 (c)95_MSfVC Bye ...

"Lobotomy.824" also displays a text in Russian. "Lobotomy.966" erases the CMOS and halts the computer.

Home