x
48h OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
SPECIAL OFFER
If you're already a customer of
our homeusers protection,
renew now with a 50% off
RENEW NOW
x
HALLOWEEN OFFER
take advantage of our
terrific discounts
BUY NOW AND GET A 50% OFF
x
CHRISTMAS OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 40% OFF
x
SPECIAL OFFER
Buy the best antivirus
at the best price
BUY NOW AND GET A 50% OFF
x
BLACKFRIDAY OFFER
Buy the best antivirus
at the best price
TODAY ONLY UP TO 70% OFF
x
CYBERMONDAY OFFER
Buy the best antivirus
at the best price
(Only for homeusers)
TODAY ONLY UP TO 70% OFF
Active Scan. Scan your PC free
Panda Protection

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

VMPCK1.DD.src

 
Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:VMPCK1.DD.src
Technical name:VBS/VMPCK1.DD.src
Threat level:Low
Type:Trojan
Effects:  It substitutes the number 19 with the word CAPut! and displays two windows on screen.

Detection updated on:Nov. 13, 2002
StatisticsNo
Family:VALENTIN

Brief Description 

    

VMPCK1.DD.src is a macro virus that displays a series of dialog boxes on screen. Its payload consists of  substituting the character 19 in infected documents with the text "CAPut!". This action happens one in every 100 times.

Like most macro viruses, it reaches computers in an infected Word document, with a DOC extension. This document then infects  Word's global template (NORMAL.DOT file) and spreads its infection to all the Word documents generated with it.

Visible Symptoms 

    

It is easy to determine if VMPCK1.DD.src has infected your computer because:

  • When trying to access the Templates and complements, Macro - Visual Basic Editor  and Macro options in the Tools menu in Word, the virus displays a fake error message. The message displayed is:

    Word Basic Err=7

  • When accessing the Help: (?) menu and choosing the About Microsoft Word option, the following message is displayed:

    CAPut! by --=¦¦N¡c0t¡N ¦¦=-- (c)1998

  • It substitutes the number 19 with the word CAPut! in the documents it infects.