Virus Database

Funeral Family

Description Funeral Family

These are dangerous memory-resident viruses that infect COM- and EXE-files as they are opened or loaded into the memory. Approximately once an hour the viruses play a funeral march, after this "Funeral.921" reboots the computer. "Funeral.921" hooks INT 8, 21h, "Funeral.900" hooks INT 1C, 21h.

Check other viruses! Be aware! Use Antiviral Software

Malatinec family

Description Malatinec family

These are dangerous parasitic encrypted viruses. They write themselves to the end of COM and EXE files.
"Malatinec.1554" is a nonmemory resident virus. It searches for COM and EXE files and infects them. "Malatinec.2367" is a memory resident, it hooks INT 21h. On Load&Execute DOS call it searches for executable files and affects them. "Malatinec.3737" is also memory resident virus, it infects files that are executed.
While infecting the viruses rename the file to:
"Malatinec.1554": FileName.M03
"Malatinec.2367": FileName.M04

then infect it and renames back to original name. The virus does not infect the files:
"Malatinec.1554":
AVG AVP CLEAN GUARD IV NAV NOD SCAN TB VIRSTOP WEB HIEW

"Malatinec.2367":
ADINF AVG AVP CLEAN DRWEB F- FINDVIRU FV GUARD IBMAV IV
NAV NOD SCAN TB TOOLKIT VIRSTOP VIVERIFY WEB HIEW

"Malatinec.3737"
COMMAND AFD CHKDSK DOS4G HIEW KRNL SCANDISK WIN ADINF AIDS ANTI ASTA
AUTHOR AVAST AVG AVP AVSCAN BAIT CERT CLEAN CPAV CRC DRWEB F- FINDVIR FV86
FV386 GOAT GUARD IBMAV ICE IV MKS MSAV NAV NOD PAS QCV QMS SCAN TB TKUTIL
TOOLKIT V- VAC VDS VIR VIVERIFY VPCSCAN WEB

The viruses delete the files:
"Malatinec.1554":
ANTI-VIR.DAT AVP.CRC CHKLIST.CPS CHKLIST.MS IVB.NTZ SMARTCHK.CPS

"Malatinec.2367":
ANTI-VIR.DAT AVP.CRC CHKLIST.CPS CHKLIST.MS CHKLIST.TAV FINGERP.VVF
FSIZES.QCV IVB.NTZ NAV_._NO SMARTCHK.CPS _CHK.CHK

"Malatinec.3737"
ADINF-?-all. ANTI-VIR.DAT AVG.GRS AVP.CRC CHKLIST.CPS CHKLIST.MS
CHKLIST.TAV CRCHECK.TXT FINGERP.VVF FSIZES.QCV ICE_?.CRC IM.PRM IVB.NTZ
MSAV.CHK NAV_._NO NODEX_?.DAT SMARTCHK.CPS _CHK.CHK

The viruses also contain the text strings:
"Malatinec.1554":
Virus Malatinec v0.3
Note: this is evolutionary (beta) version only. Be Happy!
PATH=*.* COMEXEM03

"Malatinec.2367":
Virus Malatinec v.0..W_Nreated by Aladiah
Greet: all my friends in Slovakia; G722,E10,H723,H118 & all H4??
(sch.yr.95/96) & of coz i send a big fuck 2 big boxer V.M.
Note: this is last evolutionary ( ) version. Don't Worry! Watch out

"Malatinec.3737"
[Malatinec] by Aladiah (C) 4/97
+ ¥ m , w+ + y u &pount; k¡ g ? ?!

"Malatinec.3737" depending on the system time also displays one of messages:
Ked sa budes dobre ucit, dcerenka, stanes sa manekynkou.
Don't dread! I'm friendly ghost :)
Critical Error - Use (MC) Hammer.
REALITY.SYS corrupted - reboot Universe ? [Y,n]
I'm INside. (what's about your heuristic?)
Memory failed. Use paper.
Attention. High voltage on keyboard!
Prosím Vás, Zastavte HZDS !

Malign Family

Description Malign Family

These are not dangerous memory resident parasitic viruses. They hook INT 21h and when the DOS functions GetDisk or SetDisk are executed the viruses search for the COM-files and write themselves at their beginnings. Sometimes they display the string: "Malign". On read/write error the virus "Malign.630" displays also: "Wait".

Home