Virus Database

RMC.1551

Description RMC.1551

It is a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of .COM and .EXE files that are executed or opened. On February, 16th it halts the computer and displays the message:
_ _ _ __ __ _ _ __ _ __ ___ _ _ __ _ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
___ ___ __ __ _ _ __ _ __ _ ___ _ _ ___ _ _
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
_ _ _ _ _ _ _ __ _ _ _ _ _ _ __ _ _ _
_ _ _ __ ___ ___ _ _
___ _ _ _ _ _ _ _ _
_ _ _ __ _ __ ___ _
_ _ _ _ _ _ _ _ _
_ _ _ _ _ ___ ___ _ _ _
THIS VIRUS WAS MADE BY RACASAN MIRCEA AND TODAY IS HIS BIRTHDAY.
SO, GO AHEAD AND CELEBRATE, AND IF YOU WANT TO WRITE HIM, HERE IS
HIS ADDRESS :
LEODINGER STRAßE 1/11
A-4050 TRAUN
ÖSTERREICH

The virus also contains the ID-string:
RMC16277

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Plain

Description Macro.Word97.Plain

This macro virus contains only one macro named AutoClose. It infects the system and documents on closing files. Being run on Macintosh computers since 5th day of any month it erases files on disk.

Macro.Word97.Plasma

Description Macro.Word97.Plasma
Macro.Word97.Plasma is a virus containing six macros: AutoOpen, AutoExec, AutoClose, ToolsMacro, ToolsProtectDocument and ToolsUnprotectDocument.
It infects the documents that are opened, closed or saved under new names (AutoOpen, FileClose, FileSaveAs). On file opening the virus also turns the VirusProtection option off.
The following text is inserted in infected documents:
SNOOPY looking for you! ---/// DON'T RELAX ///---
Upon entering the Tools/Macro or Tools/ProtectDocument menus the virus displays a MessageBox containing the following:
WORD.MACRO.SNOOPY
SNOOPY
DO YOU THINK, YOU COOL HACKER ?
TRY TO CRACK YOUR PASSWORD!

'Plasma' then sets a password to the current document: "SNOOPY"
When a user enters the Tools/UnprotectDocument menu the virus displays the MessageBox:
SNOOPY
You should hack it!

On entering Visual Basic Editor delete from "b:windows" all dll and drv files. Create our backup "c:windowssystemkernel32.doc".

Home