Virus Database

Macro.Word97.Lulung

Description Macro.Word97.Lulung

The virus contains 23 macros. When an infected file is opened, the virus gains control, switches off the VirusProtection option and infects the global macros area. It also disables the Alt-F8 and Alt-F11 keys, disables and hides the "Visual Basic" toolbar and the "Tools/Macroall" menu. The virus infects other documents upon opening, closing, saving, saving with a new name and also upon exiting Word.
On July 26, it displays the following message box:
Today Is My Wife's Birthday. Happy Birthday Honey!

On February 8, it shows message box:
Today Is My Wedding's Day. Thank's God!

On June 8, and also upon several menu clicks, the virus shows a dialogue window with a photo of a child.
The virus code contains the following comments:
Welcome To My Listing Program !
Created and Programmed By. June 8, 1971
©April, 1998 - Ciputat
Sorry, If my program disturbs you !
It's not danger, I just want to be your friend !

Check other viruses! Be aware! Use Antiviral Software

Lib.4000

Description Lib.4000

It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are accessed. It contains encrypted text strings:
.EXE -V.EXE AIDSTEST TNTVIRUS SCAN DOCTOR DIAG TLINK
LIB TPU TPL ARJ $00 ZIP ARC LZH ICE

and does not infects the files with the names from the first string (starting from -V.EXE). It also checks the file extensions for names from second string, but do nothing with these files.

Liberty.1170

Description Liberty.1170

It is not a dangerous memory resident parasitic virus. It hooks INT 09h, 21h and writes itself to the end of COM files that are executed. The string "Liberty" is placed at the beginning of the infected file. The virus checks the keyboard, and if Alt-Ctrl-Del keys are pressed this virus displays:
WE ARE THE VIRUSES
HAVE ATTACKED YOUR DISKS
LKBERTY S S S S S
CANISIUS COLLEGE

Home