XM97/Barisada-N

XM97/Barisada-N is an Excel macro virus which stores its viral macros in a file called HD.XLS.

On the 25th of any month the virus displays a dialog box with the text:

"Question : Hyundai Unicorns left from Incheon, What do you think of it? Answer : Hyundai is SOB ".

If the user chooses the 'Yes' answer button then the text:

"Good! You're pretty good guy!!"

is displayed. If the user chooses 'No' then

"Oh! no, Next question is last time for you"

is displayed, followed by

"We do not buy Hyundai's product, is it right?".

Answering 'Yes' displays the text:

"You got it! You have right answer".

Answering 'No' causes the virus to display:

"Wrong Answer, Your file will be deleted! You are SOB, too."

The virus will then delete all the entries in the current workbook.