Virus Database

Adin.3026

Description Adin.3026

This is harmless memory resident parasitic virus. It hooks INT 21h and writes itself at the end of COM and EXE files (except COMMAND.COM) and AIDSTEST.EXE.
It's the polymorphic virus. It infects the files are executed or renamed. It cures infected files on their debugging or opening. It contains the internal text "ADIN" also, this is the name of the file which will be corrupted on accessing.

Check other viruses! Be aware! Use Antiviral Software

Macro.Word.Talon.b

Description Macro.Word.Talon.b

This macro-virus contains five original macros that are copied with six different names while infecting the system and documents. All macros except the Info macro are encrypted.
Documents NORMAL.DOT
Macro1: FSAB FileSaveAs
FSAB
Macro2: AOB AOB
AutoOpen
Macro3: ToolsMacro ToolsMacro
Macro4: Info Info
Macro5: Password
The virus infects the global macros area upon opening an infected document (AutoOpen), and writes itself to files that are saved with new name (FileSaveAs).
Upon entering the Tools/Macro menu (ToolsMacro), the virus displays the following MessageBox:
Warning
This Option Is Not Available, Please Insert The MS-Office CD
And Install The Help Files To Continue.
On the 27th of any month, the virus sets the password "talon" for documents and displays the Message Boxes:
Warning
Your document Has Just been Been Saved, I Hope You Know The Password!!!",
Brought To You By Talon 1997"
The Info macro contains the comments:
*********************************************
Talon #1
June 18 Payload Activates
Displays Message
All Files Encrypted Except Info File
Brought To You By
"Talon"
*********************************************

Macro.Word.Talon.c

Description Macro.Word.Talon.c

This macro-virus contains five original macros that are copied with six different names while infecting the system and documents. All macros except the Info macro are encrypted.
Documents NORMAL.DOT
Macro1: FSAB FileSaveAs
FSAB
Macro2: AOB AOB
AutoOpen
Macro3: ToolsMacro ToolsMacro
Macro4: Info Info
Macro5: ToolsSpelling
The virus infects the global macros area upon opening an infected document (AutoOpen), and writes itself to files that are saved with new name (FileSaveAs).
Upon entering the Tools/Macro menu (ToolsMacro), the virus displays the following MessageBox:
Warning
This Option Is Not Available, Please Insert The MS-Office CD
And Install The Help Files To Continue.
In June on Mondays, the virus sets for documents the password "talon3" and displays Message Boxes:
Warning
I Have A Word For You To Spell V I R U S
Your document Has Just been Been Saved By The Word Macro Virus
Talon #3, I Hope You Know The Password!!!
Brought To You By Talon 1997
The Info macro contains the comments:
*********************************************
Talon #1
June 18 Payload Activates
Displays Message
All Files Encrypted Except Info File
Brought To You By
"Talon"
*********************************************

Home