Virus Database

Trojan.Spector

Description Trojan.Spector

This is trojan program. It is DOS COM file written in TurboC, about 10K of size.
When run it clears DOS screen and displays the message:
Loadingall Please Wait
then it erases all files in current directory. When damage is completed, the trojan creates five files in the current directory:
shit0.$%$
shit1.$%$
shit2.$%$
shit3.$%$
shit4.$%$

and writes the text into there:
Written by: The Spector!
shit! I think my hard drive is fucked!

The second line is repeated 100 times in the created files.

Check other viruses! Be aware! Use Antiviral Software

Macro.Access.Walla

Description Macro.Access.Walla

This virus infects MS Access databases. While infecting the virus replaces in databases the Autoexec script and copies to database additional form named "Walla Walla". Form contains macro with two subroutines:
Form_Load
ChangeProperty

When an infected database is opened, the startup form is activated. In infected databases it immediately calls subroutine "Load_Form" that contains main virus code. This subroutine searches for first five databases in the current directory and infects them. While searching the virus uses the "*.MDB" mask. Before infecting the virus changes several system parameters: disables viewing macros by using hot-keys and on error while executing macros, enables executing auto-scripts when Shift key is pressed (by default pressed Shift disables auto-scripts).
If day of month equals the month number, the virus shows two messages:
Walla Walla
Walla Wallaall
You've gotten off easy so many times
But I guess no one told you how to get a life

A97M/Walla Walla
Walla Walla...
The Song by The Offspring (c) 1998
The Virus by RUiNER '98 (c) 1998

Macro.AccessiV

Description Macro.AccessiV

This is the first known macro-virus that infects MS Access databases. The virus replaces the Autoexec script in databases ("macro" in Access terms), and copies additional macros ("module" in Access terms) to database. In this virus, the macro is named "Virus".
When an infected database is opened, the Autoexec script is activated. In infected databases, it immediately calls the virus function named "AccessiV" that searches for all databases in the current directory and infects them. While searching, the virus uses the "*.MDB" mask.
The virus does not manifest itself in any other way. It contains the comments:
Find MS Database File!
Find another MS Database File!

AccessiV.b
This is the second known Access macro-virus, which is very closely related to the first one. In March, this virus displays the MessageBox:
AccessiV - Strain B
I am the AccessiV virus, Strain B
Written by Jerk1N, of the DIFFUSION Virus Team
AccessiV was/is the first ever Access Virus!!!

It then creates and executes a file infected by DOS COM virus "Jerkin.443".

Home