Virus Database

Lazarus.1457

Description Lazarus.1457

This is a benign memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or opened. It does not infect the files: COMM???.*, WIN.*, F-PR??.*, VIRS???.*, TBAV.*, SCAN.*, MSAV.*, CPAV.*, CLEA?.*. On start it also infects one and following files: C:DOSFORMAT.COM, C:WINDOWSCOMMANDFORMAT.COM, C:WIN95 COMMANDFORMAT.COM, and deletes the files: ANTI-VIR.DAT, CHKLIST.CPS, CHKLIST.MS. When the MEM.EXE utility is run, the virus hides its block of memory. The virus contains the text string:
The Lazarus Virus (c) '98 The Shaitan/SLAM

Check other viruses! Be aware! Use Antiviral Software

Sarov.1200

Description Sarov.1200

This is a harmless memory resident parasitic polymorphic virus. It hooks INT 1, 8, 9, 21h and writes itself to the end of COM files that are accessed with DOS calls FindFirst/Next. By hooking INT 1 (tracer) the virus disables the tracing their code. By hooking INT 8 (timer) the virus change the floppy disk status, and calls the keyboard effect: by hooking INT 9 the virus 'skips' some keys that are pressed. The virus contain the text stings:
[BIL_92_Sarov]

Sarov.1400

Description Sarov.1400

This is a harmless memory resident parasitic polymorphic virus. It hooks INT 1, 8, 9, 21h and writes itself to the end of COM files that are accessed with DOS calls FindFirst/Next. By hooking INT 1 (tracer) the virus disables the tracing their code. By hooking INT 8 (timer) the virus change the floppy disk status, and calls the keyboard effect: by hooking INT 9 the virus 'skips' some keys that are pressed. The virus contain the text stings:
BIL_92_Sarov

Home