Virus Database

Macro.Word97.Opi

Description Macro.Word97.Opi

This is a stealth macro-virus. It contains six functions: AutoOpen, AutoClose, ToolsMacro, Toolscustomize, ViewVBcode, and OPIM. Upon opening a document, the virus disables the VirusProtection function. The virus replicates itself upon opening and closing documents (AutoOpen, AutoClose).
Upon entering the Tools/Macro menu, the virus sets the password "OPIM" for the current document and exits Windows. On Mondays, it replaces "the" with the "thee" string in the current document.

Check other viruses! Be aware! Use Antiviral Software

Macro.Excel.SW.a

Description Macro.Excel.SW.a

This virus infects Excel sheets. It contains three functions in one module "sw": Auto_Open, Auto_Close, no.
While loading an infected document, Excel executes the auto function "auto_open", and the virus takes control. The virus "auto_open" function redirects its "no" function as activated upon opening a sheet. When this function takes control, it spreads the virus module to all active Workbooks.
Upon closing sheets, the virus deletes all modules in them that are not viral (i.e., module names are not "sw").
The virus deletes the menus Tools/Macro, File/Macro, View/Toolbars and some other ones. On Saturday and Sunday, the virus displays the MessageBox:
Ha! Ha! Ha! Idiot ! ! !
Today is rest day!
Why do you work so hard?
All work and no play make you a dull boy!
Come on! Let's go out and have some fun!

Macro.Excel.Tabej.a

Description Macro.Excel.Tabej.a

This virus infects Excel sheets. It has one module "tabej" that contains four functions: auto_open, rx, inf, auto_close.
On opening an infected file Excel executes the auto_open virus function. This function installs the infected file TABEJ.XLS to the Excel Startup path file and assigns virus code as being executed on activating each sheet (SheetActivate handler). This handles is stealth virus routine: it removes virus code from sheets that are activated. The virus then reinfects them on closing (auto_close).

Home