Virus Database

Macro.Excel97.SW.a

Description Macro.Excel97.SW.a

This Excel macro virus is related to "Macro.Excel.Laroux". It intercepts a sheet's activation routine, and infects Excel worksheets. It contains three macros in the module "sw": Auto_Open, no, Auto_Close.
The virus deletes all menu items, shortcut menus and hot key used to view macros or related to this. Depending on the current time, the virus changes all values in the cells from B4 till G40 - it multiplies all these values by ten. On Saturdays and Sundays, the virus cleans the current sheet, and displays the following in the MessageBox:
Ha! Ha! Ha! Idiot ! ! !
Today is rest day!
Why do you work so hard?
All work and no play make you a dull boy!
Come on! Let's go out and have some fun!

Check other viruses! Be aware! Use Antiviral Software

LightGeneral.1054

Description LightGeneral.1054

These are harmless nonmemory resident parasitic viruses. They search for COM and EXE files, then write themselves to the end of the file. The viruses do not infect file if its name contains the letters: DR, AI, MS or CO. The viruses contain the text strings:
This virus was made for Computer Virus Club `Stealth`
Our address : Kiev 148 - box 10
(c) Light General.Kiev.1995.For free use!

LightNing.4251

Description LightNing.4251

It is a very dangerous memory resident parasitic polymorphic virus. It hooks INT 13h, 21h and writes itself to the end of COM and EXE files that are executed, opened, renamed or when file's attributes are accessed. The virus does not infect anti-viruses AIDSTEST, DRWEB, -V (former AVP), ADINF, SCAN and ANTI*.
When .PAS files are opened (Pascal source files), the virus searches for "BEGIN" string within a .PAS file and inserts a line of source code that either reboots the computer, or halts it:
inline($b9/$02/$00/$e2/$fb);
inline($ea/$f0/$ff/$00/$f0);

By hooking INT 13h the virus encrypts the sectors that contain text data. The virus contains the text strings:
"LightNing" (c) 12.95 by ML, Krasnodar
MetaMorphic Generator (MMG) v1.0
AIDRWE-VADSCAN

Home