Virus Database

Yosha.Novacane.271.a

Description Yosha.Novacane.271.a
It is a harmless stealth virus that infects EXE files and the MBR of the hard drive. When an infected EXE file is executed, the virus infects the MBR and reboots the computer. While loading from infected MBR the virus cuts a block of the system memory by decreasing RamSize word at the address 0000:0413, hooks INT 13h and then writes itself into the header of EXE files that are accessed. The virus contains the string:
NovaCane by Yosha/DC

Check other viruses! Be aware! Use Antiviral Software

Formula.Excel.Sic.e

Description Formula.Excel.Sic.e

This is one of the few macro viruses which does not use macros to penetrate Excel tables, which is the usual method. Instead it uses formalas.
It is impossible to detect this virus using a normal method (by viewing macros), because the virus ascribes the attritube VeryHidden to its module; this characteristic cannot be detected from an Excel menu.
The virus infects MS Excel tables when they are opened and closed.
The virus itself is one macro with two functions, Auto_Close and Auto_Open.
It contains several variables:
_Fill
Bust
Continue
Document_array
Documents_array
Hello
MakeIt
Morning
TaxTV
TaxXL
Test5
When it infects tables, it creates a hidden page called XL4Test5 where it saves its code.
It also creates an infected file called Book1 in the autorun catalogue.

Fowl.3072

Description Fowl.3072

It is a dangerous memory resident multipartite virus. While executing an infected file or while loading from an infected floppy disk the virus infects the active boot sector of the hard drive. The virus stays memory resident only while loading from infected disk (hard drive or floppy disk). The virus hooks INT 9, waits for DOS loading, and hooks INT 28h. Then the virus waits for the end of DOS installation procedure, allocates the block of conventional memory, copies itself into there and hooks INT 13h, 21h. Then the virus writes itself to the end of EXE files that are executed and infects boot sectors of the floppy disks that are accessed. Depending of the system date the virus erases the hard drive sectors.

Home