Virus Database

Macro.Excel.Ultras.Cobra

Description Macro.Excel.Ultras.Cobra

This virus infects Excel worksheets. It contains one module "Sheet?" where '?' is '3' or '5' depending on the virus version. The "Sheet?" module contains auto-functions Auto_Open and Auto_Close. The virus module also contains the functions:
TIMER, Trojan
The virus infects the system and files upon opening and closing. It also creates an infected file in the Excel Startup directory, the file name is PERSONAL.XLS or PERSONAL.XLM depending on the virus version.
The viruses delete the Tools/Macro menu (stealth) and anti-virus programs:
C:Program FilesAntiViral Toolkit Pro*.*
C:Program FilesFindVirus*.*
C:f-macro*.*
C:Program FilesCommand SoftwareF-PROT95*.*
C:Program FilesMcAfeeVirusScan*.*
C:Program FilesNorton AntiVirus*.*
On the 4th of any month, the virus writes the commands that format the hard drive to the AUTOEXEC.BAT file . On the 14th of any month, it deletes the C:WINDOWSREGEDIT.EXE file and displays the MessageBox:
ULTRAS
You Infected XM.Trojan.COBRA by ULTRAS
On the 26th of any month, it displays the same MessageBox and deletes the files:
C:WINDOWSSYSTEM.DAT, C:WINDOWSSYSTEM.DA0.

Check other viruses! Be aware! Use Antiviral Software

Tanya family

Description Tanya family
This virus corrupts the DRWEB.EXE anti-virus, and displays messages written in Russian. If a Windows NewEXE file is found (NE, PE), the virus overwrites it with a program that displays the following message:
This program must be run under OS/2.

The virus also contains the texts:
*.æ0M *.àòE
PATH=COMSPEC=OBSHCHESTVO=
DRWEB.EXE

Tarazona.985

Description Tarazona.985

It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed. On October 10 it displays the message and halts the computer:
Tranquilo chico que si no es en septiembre será en Junio :-)
Que los 12 créditos mínimos te acompañen
all..
by nEUrOtIc cPu cOrpOrAtIOn S.A.

The virus also contains the text:
Virus Tarazona_Killer por Nigromante

Home