Virus.MSWord.Ramses

Class Virus
Platform MSWord
Description

Technical Details


It is encrypted Italian virus that contains 8 macros: RAMSES, AutoOpen,
FileApri, FileSalva, FileChiudi, FileStampa, FileSalvaConNome,
FileStampaPredef.


It replicates itself on opening, saving, printing documents. The virus
contains comment texts:


RAMSES Virus: il Signore della Vita Italy 7/97 version 1.0

On 22nd of even months it erases the files:

*.XL*, *.DBF, *.WK*, *.MDB, *.PTT

and then displays the MessageBox:

RAMSES
La maledizione del Faraone ricada su di te!
Il Figlio della Luce