Virus Database

Macro.Excel97.Riots

Description Macro.Excel97.Riots

Excel macro virus, related to "Macro.Excel.Laroux". It infects Excel worksheets. It contains two macros in one module Riots: Auto_Open, Auto_Close, Fuck.
On opening an infected table Excel executes auto-macro auto_open which installs the virus into the system: copies the virus code to newly created file RIOTS.XLM in the Excel Startup directory. The virus then defines the "Fuck" macro as sheet activation handler, so the virus intercepts sheets opening procedure and infects them.
On file closing on 13th of any month the virus removes current sheet and displays the Balloon:
XM97.Riots!
by: Sbkm/AbZreplIvehfGrnz
Encripted for safe me :o)

It then displays the MessageBox:
>>XM.Riots<< if U smart you can read it!
Jr jnag ersbezngvba!
1. Ybj Gur cevpr
2. Oevat onpx zl Ehcvnu
3. Ab Zber Fbrunegb Pyna!
Sbkm/AbZreplIvehfGrnz

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Unhas

Description Macro.Word97.Unhas

This is a slightly modified "Macro.Word.Unhas" virus upconverted from Word 6.0 to Word97 format. It contains three identical macros with the names AutoOpen, JJAB, JJAO. The virus replicates itself upon document opening (AutoOpen). It displays the MessageBox:
Virus World created (c) 1996 by Ahmad Zakhri

Macro.Word97.Unhelp

Description Macro.Word97.Unhelp

This virus contains four macros in one module "Helper": AutoOpen, ViewVBCode, FileTemplates, ToolsMacro (stealth). It replicates upon document opening. While infecting, the virus uses export/import functions via the C:STARTUP.LOG file. The virus does not manifest itself in any way.

Home