Macro.Word97.Plasma
Description Macro.Word97.Plasma
Macro.Word97.Plasma is a virus containing six macros: AutoOpen, AutoExec, AutoClose, ToolsMacro, ToolsProtectDocument and ToolsUnprotectDocument.
It infects the documents that are opened, closed or saved under new names (AutoOpen, FileClose, FileSaveAs). On file opening the virus also turns the VirusProtection option off.
The following text is inserted in infected documents:
SNOOPY looking for you! ---/// DON'T RELAX ///---
Upon entering the Tools/Macro or Tools/ProtectDocument menus the virus displays a MessageBox containing the following:
WORD.MACRO.SNOOPY
SNOOPY
DO YOU THINK, YOU COOL HACKER ?
TRY TO CRACK YOUR PASSWORD!
'Plasma' then sets a password to the current document: "SNOOPY"
When a user enters the Tools/UnprotectDocument menu the virus displays the MessageBox:
SNOOPY
You should hack it!
On entering Visual Basic Editor delete from "b:windows" all dll and drv files. Create our backup "c:windowssystemkernel32.doc".
Check other viruses! Be aware! Use Antiviral Software
Email-Worm.Win32.Locksky.k
Description Email-Worm.Win32.Locksky.k
This worm spreads via the Internet as an attachment to infected messages. It sends itself to email addresses harvested from the victim machine. The worm itself is a PE EXE file 30373 bytes in size. Installation Once launched, the worm copies itself to the Windows system directory as "all
Email-Worm.Win32.Monikey.a
Description Email-Worm.Win32.Monikey.a
This worm sends itself as an infected message to email addresses harvested from the victim machine. Infected messages contain a link to a server where a copy of the worm has been placed. The worm can also spread via file-sharing networks. The worm itself is a PE EXE file approximately 80KB in sizeall
|