Virus Database

Godzina.1024

Description Godzina.1024

It's a not dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE-files that are executed. On Sundays on 22:xx of system timer it sets this timer to 23:xx, then it decrypts and displays the message:
Chwieje sie lew,upada w mrok
chwytaja go demony
Szkarlatne skrzydla prezy smok
przez czarny wiatr niesiony
Rycerze wiecznym legli snem
bo Wielki Boj ich znuzyl
A w glebi gor przekletych,hen
szatanski roj sie budzi
GODZINA SMOKA ! Trupi chlod
strach krwawym lypie okiem
GODZINA SMOKA ! struchlal lud
ktorz oprze sie przed smokiem ?

Check other viruses! Be aware! Use Antiviral Software

Lamento.2690

Description Lamento.2690

It is a very dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are accessed. While installing the virus also infects the C:COMMAND.COM and C:DOSMODE.COM files. The virus checks the file name, and does not infect the files that begin with any of the strings:
PCVIR CENTINEL SCAN CLEAN VSHIELD ATM TB CPAV MSAV TNT FINDVIR VC VREMOVE
VSMENU VSCHK MM. KEYB.

On January 21st the virus sets the system date to January, 20th, then deletes C:AUTOEXEC.BAT and C:CONFIG.SYS files, renames to the random names all the files in subdirectories of C: drive:
DOS MSDOS SYS DRDOS IBMDOS
WINDOWS WIN WIN3 WIN30 WIN31 WIN311

While processing Windows' directories the virus looks also for SYSTEM subdirectory. Then the virus displays the messages:
Lamento tener que comunicarle que hoy es 21 de Enero all
... ha sido una cortes¡a de Woi

Lamerman

Description Lamerman

It is a very dangerous memory resident multipartite virus. It infects the MBR of the hard drive and overwrites EXE files that are created or copied, i.e. the virus does not affect existing EXE files but newly created/modified files only.
When an infected file is executed the virus affects the MBR and halts the computer, while infecting the virus fools the BIOS virus protection by a simple keyboard trick. On rebooting the virus stays memory resident, hooks INT 13h and overwrites EXE files on writing to them.
The virus contains the text string:
Lamerman .01

Home