Gdynia.680
Description Gdynia.680
Gdynia.680 is a benign non-memory resident parasitic virus. It searches for COM files, then writes itself to the end of the file. Starting from February, the virus decrypts and displays the following message:
Windows 95 may be dangerous.
OS/2 is the best operating system!
I`ll prove it soonall
If this text is modified, the virus reboots the system. The virus also contains the text strings:
*.COM
* Gdynia 1996 * v1.0 *
Check other viruses! Be aware! Use Antiviral Software
LionKing.3531
Description LionKing.3531
It is a dangerous memory resident stealth polymorphic parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or closed. When an infected file is opened, the virus disinfects it. While installing and infecting the virus avoids some anti-virus programs, while executing some utilities it disables stealth routine. The virus checks the system environment and infects COMMAND.COM file. Depending on the system date the virus displays the message and erases the disk sectors:
Ja som virus Lion King
Formatujem ti disk lebo devastujes prirodu
It also contains the text strings:
Vypadni z tejto casti RAM!
TBMEMXXXTBFILXXXTBCHKXXXTBDSKXXX
VIRSCANCLEAANTICPAVGUARSHIELKITTRAPPASCSOLOTBAVMSAV
COMSPEC=
tbscan tbsetup cpav msav enav scan viverify avg nodex
pkzip arj uc lharc arc lha
chkdsk
Lip.286
Description Lip.286
This is a very dangerous nonmemory resident parasitic virus. It searches for .COM files of the current directory and writes itself to the end of the file. Some infected files upon their start display the text:
(C)RomlSoft(LipPI)1991
and then erase FAT and boot sector of the current disk.
|