Virus Database

Luri.1216

Description Luri.1216

It is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of .EXE files that are accessed. The virus has a serious bug - while installing memory resident it decreases the ram size (the word at the address 0000:0413) and copies itself to there, but does not correct the MCB list. That may cause system halt.
The virus contains partly encrypted texts:
+--------------+
| LD '93 |
+--------------+
(C) May 4th 1993
By Luri Darmawan
Semarang - 50112
-- Indonesia. --
_ _
_ /_
_¦
_ __ _
____
File is corrupt with illegal code in this software all..
You haven't changed my data , You will dead !!!
LD - 93

On May 4th it overwrites the MBR of the hard drive with a program that on booting displays some of these strings. Then it displays the same messages and prints them.

Check other viruses! Be aware! Use Antiviral Software

Liberty.a

Description Liberty.a

This is a resident and dangerous virus. It infects COM and EXE files while executing. The virus infects EXE files in a standard way. To infect COM file the virus adds itself to the end of the file and puts 78 h bytes of the virus code into the beginning of the file (the virus encryption and activating); the virus decrypts the old part of the file from the beginning and saves it into the own body. This virus infects boot sector of the floppy disk if there isn't free space on the disk to infect the files. The virus places the original boot sector and the body of the virus onto the 40th track of the disk (a non standard formatting is used in that case). This process can destroy information on high capacity floppy disks (1M).
The virus infects memory if an infected COM-file was started or if it was used for the system rebooting.
Some time after rebooting the system from a floppy disk the virus encrypts and outputs to the screen, printer and communication ports the string "MAGIC MAGIC MAGIC MAGIC all...". This virus cures the floppy disk on the 10th rebooting from it. It hooks INT 8, 10h, 13h, 14h, 17h, 1Ch, 21h and contains the strings: "Liberty", "- MYSTIC - COPYRIGHT (C) 1989-2000, by SsAsMsUsEsL".

Licei.1500

Description Licei.1500

This is a dangerous memory-resident encrypted, stealth parasitic virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are accessed. Upon starting from a file in one case in 12, the virus displays a message in Russian. The virus periodically disables the keyboard.

Home