Virus Database

HLLO.Nedal.17174

Description HLLO.Nedal.17174

It is a dangerous nonmemory resident parasitic virus. It is written in High Level Language C. On start the virus displays a message and waits for the key pressed. Than it writes itself to the all .EXE files in current directory. The message of the virus is:
Al-Qaeda Network (c) 1995-2002. All Right Reserved.
---------------------------------------------------

WTC has been destroy, Now another strategy attacker waiting!
This virus are very fast to infect all Executable file!
No Peace to America and Israel.
This Virus was create by Vladimor Chamlkovic and an Idea by
Nur Mohammad Kamil. Http://www.melhacker.netfirms.com
If Any people found this Virus contact me at
***********@hotmail.com or *******@k.ro
Sorry cause you're file has been infected!

by
Win32.OsamaLaden Virus

Check other viruses! Be aware! Use Antiviral Software

Lawine.2449

Description Lawine.2449

It is not a dangerous memory resident encrypted stealth parasitic virus. It hooks INT 13h, 21h and writes itself to the end of COM and EXE files that are executed. On selecting a new directory the virus searches for COM files in there and infects them. The virus disables its stealth and infection routines when files with several hard-coded lengths are executed (anti-virus scanners?). The virus also does not infect the anti-virus programs:
F-PR,TBAV,SCAN,MSAV,CPAV,TBME,TBFI,TBSC

The virus contains the text strings:
allGravenreuth says: Gotcha !.... ...LAWINE was written in
Germany '94...Greetings to NB...

Lazarus.1457

Description Lazarus.1457

This is a benign memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or opened. It does not infect the files: COMM???.*, WIN.*, F-PR??.*, VIRS???.*, TBAV.*, SCAN.*, MSAV.*, CPAV.*, CLEA?.*. On start it also infects one and following files: C:DOSFORMAT.COM, C:WINDOWSCOMMANDFORMAT.COM, C:WIN95 COMMANDFORMAT.COM, and deletes the files: ANTI-VIR.DAT, CHKLIST.CPS, CHKLIST.MS. When the MEM.EXE utility is run, the virus hides its block of memory. The virus contains the text string:
The Lazarus Virus (c) '98 The Shaitan/SLAM

Home