Virus Database

Estier.2126

Description Estier.2126

This is a very dangerous, memory resident parasitic stealth virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are executed or closed. Upon opening an infected file, the virus disinfects it. The virus does not infect anti-viruses: TBAV, TBSCAN, NAV, VSAFE, F-PROT, and SCAN.
When the TBSCAN anti-virus is executed, the virus appends, to the end of the command line, the option "co" and hooks INT 1Ch. By hooking INT 1Ch, the virus looks for the string "DOS OWN" in the code of TBSCAN, and pathes it. The virus also searches for TBDRV anti-virus and patches it too.
On July 17 and 28, September 7 and on any day at 14:10, the virus erases the C: drive sectors and displays the following message:
ESTIERCOL! - Paraguay

Check other viruses! Be aware! Use Antiviral Software

not-virus:Hoax.Win32.Avgold.d

Description not-virus:Hoax.Win32.Avgold.d
This 'joke' program functions as advertising. It is written in Visual C++, and it 36864 bytes in size. Installation When launching, the program copies itself to the system directory as hookdump.exe. It then registers this file in the system registry to ensure that the program is launched eachall

not-virus:Joke.JS.Spawn.b

Description not-virus:Joke.JS.Spawn.b

Spawn is a "joke". Once launching the Java-script contained within the infected document's html a user's Internet Explorer browser window begins to move around. Besides this several more IE windows open in the background.

Home