Virus Database

Aiw.572

Description Aiw.572

It's a harmless memory resident parasitic virus. It hooks INT 21h and writes itself at the end of COM-files that are executed or loaded as overlay. It contains the internal text string: "AIW2°JB".

Check other viruses! Be aware! Use Antiviral Software

Macro.Excel.Tabej.a

Description Macro.Excel.Tabej.a

This virus infects Excel sheets. It has one module "tabej" that contains four functions: auto_open, rx, inf, auto_close.
On opening an infected file Excel executes the auto_open virus function. This function installs the infected file TABEJ.XLS to the Excel Startup path file and assigns virus code as being executed on activating each sheet (SheetActivate handler). This handles is stealth virus routine: it removes virus code from sheets that are activated. The virus then reinfects them on closing (auto_close).

Macro.Excel.Taiwanes.a

Description Macro.Excel.Taiwanes.a
This trojan contains functions: auto_open, WriteBook, OpenExec, OpenConfig, GetPath, DelFiles, SaveProcedure.
On opening an infected file Excel executes "auto_open". This function sets the SaveProcedure function as sheet saving function. On saving this function takes control and displays the MessageBox:
Taiwanese Version 2.1 will now infect your system!

The trojan inserts the commands into the files:
C:AUTOEXEC.BAT:
@Echo Your system has been infected by LATEST MACRO VIRUS Version 2.1 -- Taiwanese
Pause
C:CONFIG.SYS:
Rem You are infected by LATEST MACRO VIRUS Version 2.1-- Taiwanese
[Menu]
MenuItem = WIN95, LATEST MACRO VIRUS Version 2.1
menuitem=DOS, !!!!Safe Recovery!!!!
menudefault=WIN95, 1
[WIN95]
DEVICE=c:WINdowsHIMEM.SYS /TESTMEM:OFF
[DOS]
DEVICE=c:WINdowsHIMEM.SYS /TESTMEM:OFF
DEVICE=c:WINdowsEMM386.EXE RAM NOEMS
FILES = 150
DOS = Low

The trojan erases Word-files. It writes its 26 copies to the Excel startup directory, the file names are BOOK<number from 65 till 90>.XLT and 10000 copies with names SSCAN<0 - 9999>.XLT
Taiwanes.b
This trojan contains functions: auto_open, InterruptKey, ESC, WriteCommand, OpenExec, OpenConfig, GetPath, SaveProcedure.
The same as "Taiwanes.a", but corrupts the COMMAND.COM file and does not creates files in Excel startup directory.
On entering ESCAPE, ENTER, HOME, INSERT, NUMLOCK, PGDN, PGUP, TAB keys calls for "ESC" function and displays a MessageBox in Chinese. After all closes Windows.

Home