Virus Database

Glew.4245

Description Glew.4245

This is a very dangerous memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed, opened or closed. The virus does not infect several anti-virus programs (TBAV, FVIRU, F-PROT, AVP, e.t.c.) and COMMAND.COM according to the string:
TB FV F- VS AV VIR HIE OOLK UARD SCAN CLEA MMAN
The virus intercepts KEY and SIG files opening, looks for some program in the memory (anti-virus?) and patches its code.
On January 3, 9 and on July 19 the virus erases the hard drive sectors and displays the message:
A la Memoria de Cevallitos
-= RATA de GLEW virus =-

Check other viruses! Be aware! Use Antiviral Software

Marzia.2048.DV

Description Marzia.2048.DV

This is a dangerous memory resident multipartite stealth virus. On execution of infected file it infects MBR of hard drive. Then it hooks INT 13h, 21h. On loading from infected sector it hooks INT 13h, waits for DOS loading and hooks INT 21h. On accessing to infected MBR (virus checks it by using INT 13h hooking) it substitutes it by not infected one. By hooking INT 21h the virus intercepts the files for infection.
On installation it traces INT 13h and hooks INT 1Ch. It writes itself at the end of COM and EXE files are executed or closed. On opening of the infected file this virus cures it.
It contains the internal text strings also:
DVv1.00a

Marzia.2048.WW

Description Marzia.2048.WW

This is a dangerous memory resident multipartite stealth virus. On execution of infected file it infects MBR of hard drive. Then it hooks INT 13h, 21h. On loading from infected sector it hooks INT 13h, waits for DOS loading and hooks INT 21h. On accessing to infected MBR (virus checks it by using INT 13h hooking) it substitutes it by not infected one. By hooking INT 21h the virus intercepts the files for infection.
On installation it traces INT 13h and hooks INT 1Ch. It writes itself at the end of COM and EXE files are executed or closed. On opening of the infected file this virus cures it.
Depending on current date the virus erases the hard drive sectors or call INT 24h. On calling INT 21h, AX=3031h the virus decrypts and displays the message:
Virus Development Software
(c)92 PETUNIA virus
Written by Willi Wonka
Fago industries (c)1991
It contains the internal text strings also:
MARZIA WWMARZIA

Home