Virus Database

Macro.Word.VisuaLand

Description Macro.Word.VisuaLand

This is an encrypted Word macro virus. It contains five macros: AutoOpen, FileOpen, MyMessage, VisuaLand, FileSaveAs.
The virus infects the global macros area (NORMAL.DOT) on opening an infected document (AutoOpen) and writes itself to documents that are saved (FileSave). The virus also attempts to infect files that are saved with new name (FileSaveAs), but fails because of an error.
On 13th of any month it erases all files in current directory and displays the MessageBox:
VisuaLand!
VisuaLand Technology is the BEST!

On saving a document with new name, if current seconds = 13, the virus sets the password: "VisuaLand". The virus creates the MESSAGE.TXT file and writes the text to there:
VisuaLand 2.0 Oleh: Milky Wahyudi
Widjaya GoldSecret (C) 1997 VisuaLand Technology
Virus kedua setelah visuaLand 1.0 (rekayasa Concept)
Seperti biasanya saya selalu hadir kedepan anda untuk
selamat, untuk segala sesuatu yang telah anda lakukan
memang enak menjadi orang seperti anda, tapi jangan
dikira anda ini sedang 'happy', anda rupaya sedang
mengalami masa-masa krisis pada komputer anda, jangan
menuduh teman anda atau pacar anda yang melakukan hal
ini, tetapi itu merupakan ulah saya.
Virus ini merupakan hasil rekayasa virus Atom, yang
dulunya saya akui bahwa virus tersebut merupakan saya
yang buat, tetapi banyak orang sirik yang ingin merebut
nya dari saya, tetapi sayalah yang membuat Atom, versi
ini merupakan versi perbaikan dari virus Atom"
Bila anda ada waktu senggang, anda bisa menemukan saya
di rumah pada jam-jam tertentu, saya harapkan hubungan
dari anda.
Milky Wahyudi Widjaya
Jl. H Marzuki No. 37 RT 6/3
Jakarta - 11530
Indonesia
+62 21 5320382
EMail: milky@dnet.net.id
milky@visualand.com
HPage: http://www.visualand.com/

The virus also contains the comments:
----------------------------------------------------------------
Virus: VisuaLand.2.WinWord
Author: Milky Wahyudi Widjaya
VRating: Make First WordMacro.virii (Atom)
Compiler: WordMacro in ToolsMacro
(C) 1983-1994 Microsoft Corporation
Copyright: GoldSecret (C) 1997 VisuaLand Technolgy
Email: milky@dnet.net.id 'or' milky@visualand.com
Homepage: http://www.visualand.com/
Last Update: 02-02-1997
VL Office: Visualand Technology
Jl. H. Marzuki No.37, RT 06/03
Jakarta, 11530
Indonesia
Phone: +62 21 5320382
Dedication: - Unknown (Atom was created by you???)
- Eko Sulistiono (MD)
- All VirMarker in the World
Thank's: God
-----------------------------------------------------------------

Check other viruses! Be aware! Use Antiviral Software

4on.1346

Description 4on.1346

It is a harmless memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of .EXE files that are accessed. It contains the text string:
4ON-\*+>

4res

Description 4res

It is not a dangerous nonmemory resident virus. It writes itself to the end of .COM and .EXE files of current directory and directories that are marked in the PATH string. On January, 1st it halts the computer. It contains the internal text strings:
4RESPATH=COMSPEC=*.COM
*.EXE
4RES

Home