Macro.Excel.Yohimbe
Description Macro.Excel.Yohimbe
This is an Excel macro virus. The only module (macro) in this virus is named "Exec", it contains three subroutines: Auto_Open, DipDing, PayLoad and one function: SheetExists. Auto_Open routine is auto one, it is called by Excel on opening any file. On this call the virus infects PERSONAL.XLS. In case of any error, the virus infects all active books (files). Before returning the Auto_Open macro sets the DipDing subroutine as a timer handler that is called starting from 4:00pm. This subroutine infects all opened books.
The virus writes the string "Yohimbe" to the sheet header. The virus also sets PayLoad subroutine as called starting from 4:45pm. This routine re-sizes active sheet, draws a picture and inserts the text "FUCK YOU BUDDY" into the sheet.
Check other viruses! Be aware! Use Antiviral Software
GoodLuck.300
Description GoodLuck.300
It is not a dangerous memory resident parasitic virus. It copies itself into Interrupt Vectors Table, hooks INT 21h and writes itself to the beginning of COM files that are executed. Depending on its counter the virus displays the message:
Good luck!
GoodThursday
Description GoodThursday
This is a dangerous non-memory resident overwriting virus. It searches for .COM-files and overwrites them. On Thursdays, it displays the following message:
Today is Good Thursday, nothing can go wrong!
|