Virus Database

LunchTime.2050

Description LunchTime.2050

It is not a dangerous memory resident parasitic virus. It hooks INT 21h and when any program is executed, the virus searches for EXE files on the C: drive and writes itself to the end of the file. The virus does not infect files with the name MKS* (Polish anti-virus).
The virus deletes the anti-virus data files: CHKLIST.MS, CHKLIST.CPS. Starting from 12:00 till 14:00 the virus displays the message:
+--------------------------------------------------------+
| Po co tak ciezko pracujesz ? |
| Zrób sobie przerwe i idz na lunch. |
| Twój dysk twardy zostal zakodowany do godziny 14:00. |
| O tej godzinie zostanie odkodowany. Jesli wylaczysz |
| komputer wczesniej, stracisz na nim dane bezpowrotnie. |
| |
| Czas do konca przerwy : 1:59:00 |
| |
| NIE WYLACZAJ ANI NIE RESETUJ KOMPUTERA !!! |
+--------------------------------------------------------+

The virus also contains the text strings:
Jakze tu wszedles,powiedz i dlaczego?
Nielatwo wspiac sie na ten mur wysoki.
I smierc tu znajdziesz,zwazywszy, kim
jestes, Jesli cie spotka którys z moich krewnych.
Lunchtime Kraków -styczen 97

Check other viruses! Be aware! Use Antiviral Software

Grunt.344

Description Grunt.344

These are dangerous not memory resident encrypted parasitic viruses. They search for .COM-files and write themselves to the file's ends. "Grunt" viruses erase disk sectors or files, they also type messages. These viruses contain the internal text strings:
"Grunt.344,346":
[GRUNT-1] -=> Agent Orange '92 <=- *.com

"Grunt.359":
ALLERBMU NORI+
(C) 1991 by SMAUG in MÜNCHEN, DEUTSCHLAND!

"Grunt.427":
[GRUNT-2] -=> Agent Orange '92 <=- Rock of the Marne, Sir!

"Grunt.473":
[GRUNT-3] -=> Agent Orange '92 <=- This is a hot LZ all Eradicating the Enemy!

"Grunt.529":
[GRUNT-4] *.COM TBFILXXX .. -=> Agent Orange '92 <=-
Nothing like the smell of napalm in the morning!

GS.525

Description GS.525

This is a harmless memory resident virus which hooks INT 21h and infects by standard way the COM-files that are started which begin from JMP NEAR (E9h) opcode only. The string "GS/02" is present at the beginning of infected files and at the virus entry point.

Home