Virus Database

Remember.1283

Description Remember.1283

This is a benign non memory-resident parasitic virus. It searches for COM files, then writes itself to the end of the file. On April 24, it displays the following messages (possibly in Japanese):
óz------------------------------ó{{
óx [ Remember 4.0 ] óx
óx óx
óx íx "+ ++ +++ Ñ-ñ +++ íx óx
óx óx
óx |+"u |+Pxí |+"u |"+|+ óx
óx óx
óx b +¿ |úxNÑI++ p óx
óx óx
óx -@ +"+ p" +¿ |o+ ¿+ |"+|+ óx
óx óx
óu------------------------------ót
óx- Written by Jean at O.V.E.L -óx
ó|ówówówówówówówówówówówówówówówó}
<<< Welcome >>>
=================================
The OVEL bbs Tel is 02-927-7432
=================================

Check other viruses! Be aware! Use Antiviral Software

Macro Virus Development Kit Constructor

Description Macro Virus Development Kit Constructor

This is a macro word tool for creating Macro.Word viruses. It contains the following macros: Install, MVDKMain, MVDKAbout, UnInstall, MVDKPayLoad.
As info about the program it states:
Macro Virus Development Kit
v1.0 beta
(c) 1996, Wild W0rker /DC

It creates text files containing the following macros:
C:FILENEW.TXT
C:FSAVEAS.TXT
C:PAYLOAD.TXT
C:FILEOPEN.TXT
C:FILESAVE.TXT
C:VirusName.TXT
C:AUTOOPEN.TXT
C:AUTOEXEC.TXT

It is able to choose one of the following effects for creating a virus:
Set Password
Erase System Files
Drop File
As a condition, it is possible to chose: Day/Second.
The file C:DROPPER.SCR contains a script with a drop file that has to exist before starting virus creation.
The virus uses a standard drop batch file. It creates the file: C:CONVERT.BAT:
@ECHO OFF
DEBUG.EXE < C:DROPPER.SCR > NUL
DEL C:DROPPER.SCR

It adds a line for executing the created virus dropper at the end of C:AUTOEXEC.BAT
There are two similar versions of this constructor: v1.0 beta and v1.0.

Macro.Access.Detox.a

Description Macro.Access.Detox.a

This virus infects MS Access databases. While infecting, the virus replaces the Autoexec script in databases and copies an additional macro named TDU to the database . This macro contains four subroutines:
TheDetoxUnit
SetStartupProperties
ChangeProperty
Info

When an infected database is opened, the Autoexec macro is activated. In infected databases it immediately calls the virus function TheDetoxUnit that searches for all databases in the current directory and infects them. While searching the virus uses the "*.MDB" mask. Before infecting the virus disables the Tools/Options menu and changes several system parameters: disables viewing macros by using hot-keys and on error while executing macros, enables executing auto-scripts when Shift key is pressed (by default pressed Shift disables auto-scripts).
The Info subroutine contains nothing but comments:
The Detox Unit Access Macro Virus
written by Sin Code IV
(an old friend by any other nameall)

Home