Virus Database

Lawine.2449

Description Lawine.2449

It is not a dangerous memory resident encrypted stealth parasitic virus. It hooks INT 13h, 21h and writes itself to the end of COM and EXE files that are executed. On selecting a new directory the virus searches for COM files in there and infects them. The virus disables its stealth and infection routines when files with several hard-coded lengths are executed (anti-virus scanners?). The virus also does not infect the anti-virus programs:
F-PR,TBAV,SCAN,MSAV,CPAV,TBME,TBFI,TBSC

The virus contains the text strings:
allGravenreuth says: Gotcha !.... ...LAWINE was written in
Germany '94...Greetings to NB...

Check other viruses! Be aware! Use Antiviral Software

NTU Family

Description NTU Family

These are memory resident parasitic encrypted viruses. They hooks INT 21h and write themselves to the end of EXE files.
NTU.Amour.3312
It is a dangerous polymorphic stealth virus. It infects EXE files that are executed or opened. It contains the text strings:
L'AMOUR v1.1 by NTU BACTERIOPHAGE LAB S/N TM1-

following by the decimal number of its generation. In some cases it erases CMOS memory and hard drive sectors.
NTU.T4.2138
It is a harmless virus. It infects EXE files that are executed. It contains the text strings:
T4
Griffe
T4 virion ----- by NTU BACTERIOPHAGE LAB
There Once Was A King, Who Called For The Spring
For His World Was Still Covered In Snow
But The Spring Had Not Been, For He Was Wicked And Mean all
Here I'm Sitting And It's Getting Cold
The Morning Rains Against My Window Pane
While The World Looks So Cold And Grey
In My Mind I Dream Away
Then I'm On My Way To Tropic Islands
You'd Always Say I Was A Dreamer
You Were Right
What Do I Say When It's All Over ?
And SORRY Seems To Be The Hardest Word ...

NTZ Family

Description NTZ Family

These are nonmemory resident encrypted parasitic viruses. They search for .COM files, then writes themselves to the end of the file.
"NTZ.397" is a dangerous virus, it deletes the files with NTZ extension. That virus contains the text string:
*.NTZ *M.COM

Home