Arianna.3076
Description Arianna.3076
This is a parasitic encrypted and stealth virus. While executing an infected file it infects the MBR of the hard drive. While loading from infected MBR it hooks INT 1Ch, waits for DOS loading, then hooks INT 13h for stealth algorithm while accessing to infected MBR, and INT 21h to infect the files. It writes themselves to the end of EXE and COM files that are accessed. When an infected file is opened, the virus disinfect it.
Sometimes the viruses manifest themselves with a video effect and erase the original MBR sector (not first hard drive sector, but the sector containing the original MBR that was saved while infecting a disk). The viruses contain the text strings:
Improved ARIANNA , waiting for ADVANCED 386
Bari @1995 by AV(ANTI)-VIRUS SYSTEM
Check other viruses! Be aware! Use Antiviral Software
Kadavr.506
Description Kadavr.506
It is a harmless memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed. The virus does not manifest itself in any way. It contains the text in Cyrillic:
Kadavr
Kai.301
Description Kai.301
This is a harmless nonmemory resident parasitic virus. It searches for COM files and writes itself to the end of the file. The virus contains the text string:
AVS v1.0(c)1997 'KAI
|