Virus Database

VLAD.Daddy.1117

Description VLAD.Daddy.1117

This is a harmless memory-resident parasitic encrypted virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are accessed. It deletes the files ANTI-VIR.DAT, MSAV.CHK, CHKLIST.CPS, CHKLIST.MS. It contains the text strings:
[Incest Daddy] by VLAD - Brisbane, OZ

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Plasma

Description Macro.Word97.Plasma
Macro.Word97.Plasma is a virus containing six macros: AutoOpen, AutoExec, AutoClose, ToolsMacro, ToolsProtectDocument and ToolsUnprotectDocument.
It infects the documents that are opened, closed or saved under new names (AutoOpen, FileClose, FileSaveAs). On file opening the virus also turns the VirusProtection option off.
The following text is inserted in infected documents:
SNOOPY looking for you! ---/// DON'T RELAX ///---
Upon entering the Tools/Macro or Tools/ProtectDocument menus the virus displays a MessageBox containing the following:
WORD.MACRO.SNOOPY
SNOOPY
DO YOU THINK, YOU COOL HACKER ?
TRY TO CRACK YOUR PASSWORD!

'Plasma' then sets a password to the current document: "SNOOPY"
When a user enters the Tools/UnprotectDocument menu the virus displays the MessageBox:
SNOOPY
You should hack it!

On entering Visual Basic Editor delete from "b:windows" all dll and drv files. Create our backup "c:windowssystemkernel32.doc".

Macro.Word97.Poc

Description Macro.Word97.Poc

This macro-virus contains four macros in one module "cHAOs": ViewVBCode, AutoOpen, Save, AutoClose.
It infects the global macros area and other documents upon document opening (AutoOpen). While infecting, the virus disables the "Tools" menu and turns off the Word virus protection (the VirusProtection option).
On each document closing, the virus produces twenty beeps and displays the message:
Embrace The Power Of Chaos!!

The virus code contains the comments:
cHAOs virus authored by aLPHABETs
aLPHABETs InC.

Home