Macro.Word97.Romeo
Description Macro.Word97.Romeo
This macro virus infects MS Word documents and templates when they are created, opened or closed.
The virus itself is a macro. It contains the following text string:
'Anti-Virus for & ROMEO'
'Anti_Virus'
When an infected file or template is opened, the virus disables the ban on executing macros in Word and blocks all attempts to open the built-in Visual Basic editor.
The virus checks for macros containing the string Anti_Virus and if such a macro is not found, it infects documents.
Check other viruses! Be aware! Use Antiviral Software
RTL.805
Description RTL.805
It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of .COM files that are executed. The virus contains the bug and may halt the system while infecting. When aby file is deleted, the virus displays the message and terminates deleting:
I'm sorry, but I cant let you mercilessly slaughter
poor innocent files in their prime!
Files have a RIGHT TO LIFE too
Rubbit.1018
Description Rubbit.1018
This is a benign memory resident parasitic virus. It searches for original address of INT 21h handler in DOS area, hooks INT 21h and writes itself to the end of the files. While installing its TSR copy the virus copies itself to the address 9000:0106 and do not fix MCB list, that can halt the system.
The virus infects COM files that are executed or loaded as overlay. While infecting they rename the file to "RUBBIT.$$$", infect it and then rename back to original name.
These viruses also contain the texts:
:RUBBIT.$$$
|