Virus Database

Level3.4870

Description Level3.4870

It is not a dangerous memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or opened. While infecting it checks the file name and does not infect the files:
SCAN VSHIELD CLEAN FINDVIRU GUARD VIVERIFY TB -V
VIRSTOP NOD HIEW PASCA NETENVI F-PROT CHKDSK

While installing or terminating any program the virus checks the system memory for anti-virus monitors TBAV and VSAFE and disables them, it uses its string to locate these monitors:
TBMEMXXXTBCHKXXXTBDSKXXXTBFILXXX

Depending on its generation and system date the virus displays the message:
Welcome to the Explosion's Mutation Machine !
Dis is level 3.

It also contains the text strings:
* EMM 1.0 *
COM EXE

Check other viruses! Be aware! Use Antiviral Software

Before.2915

Description Before.2915

It is not a dangerous memory resident parasitic virus. The virus was written in Assembler and its actual code is 1164 bytes, but after that virus author compressed it with AIN executable files compressor, and result virus code (compressed actual virus code and decompression routine) grows up to 2915 bytes.
The virus hooks INT 21h and writes itself to the beginning of COM and EXE files that are executed. The virus does not infect the files: CO*, WI*, EM*, SH*, GD* (COMMAND, WIN, EMM386, all). Depending on the system time and video mode the virus disables executing files (does not allow to start games?). The virus contains the text strings:
COWIEMSHGD
BEFORE.CE.1136 (C) PC Soft Club

Bel.2124

Description Bel.2124

It is a very dangerous memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or opened. The virus checks file names and does not infect files: CO*, DR*, WE*, AI*, AD*, VB*, AV*, HI*, CH*, CC*. Depending on the system date the virus deletes files with extensions: .CFG, .TIC, .PAC, .PAK, .SAV, .WAD and some other.
The virus contains the text strings:
* reBEL.P1 * üâô (Belarus).
Hi, Mr. Kolyada!

Home