macro.excel.taiwanes.
Webroot Antivirus: The best protection against viruses, spyware data theft and hackers.
Description:
Details
Macro.Excel.Taiwanes.a
This trojan contains functions: auto_open, WriteBook, OpenExec, OpenConfig, GetPath, DelFiles, SaveProcedure.
On opening an infected file Excel executes "auto_open". This function sets the SaveProcedure function as sheet saving function. On saving this function takes control and displays the MessageBox:
Taiwanese Version 2.1 will now infect your system!
The trojan inserts the commands into the files:
C:\AUTOEXEC.BAT:
@Echo Your system has been infected by LATEST MACRO VIRUS Version 2.1 -- Taiwanese
Pause
C:\CONFIG.SYS:
Rem You are infected by LATEST MACRO VIRUS Version 2.1-- Taiwanese
[Menu]
MenuItem = WIN95, LATEST MACRO VIRUS Version 2.1
menuitem=DOS, !!!!Safe Recovery!!!!
menudefault=WIN95, 1
[WIN95]
DEVICE=c:\WINdows\HIMEM.SYS /TESTMEM:OFF
[DOS]
DEVICE=c:\WINdows\HIMEM.SYS /TESTMEM:OFF
DEVICE=c:\WINdows\EMM386.EXE RAM NOEMS
FILES = 150
DOS = Low
The trojan erases Word-files. It writes its 26 copies to the Excel startup directory, the file names are BOOK
Taiwanes.b
This trojan contains functions: auto_open, InterruptKey, ESC, WriteCommand, OpenExec, OpenConfig, GetPath, SaveProcedure.
The same as "Taiwanes.a", but corrupts the COMMAND.COM file and does not creates files in Excel startup directory.
On entering ESCAPE, ENTER, HOME, INSERT, NUMLOCK, PGDN, PGUP, TAB keys calls for "ESC" function and displays a MessageBox in Chinese. After all closes Windows.
Copyright @2006 macro.excel.taiwanes.