Virus Database

LX.1996

Description LX.1996

This is a very dangerous memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of COM files that are executed, opened or accessed by Get/SetFileAttribute DOS function. On the 13th of any month, the virus writes the following commands to the end of the C:AUTOEXEC.BAT file:
cls
echo Hi! I am LX 1358 Version 1.03
echo Y | format c: >nul
cls
The virus also contain the text string:
Set Virus=LX 1996 Version 2.50 (why LX ? - see below)
CopyRight=(C) 1996 Sergey K. & Alexey C.

Check other viruses! Be aware! Use Antiviral Software

Mururoa.2464

Description Mururoa.2464

This is a relatively harmless, memory resident encrypted parasitic stealth virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are executed or closed. When an infected file is opened, the virus disinfects it. The virus doesn't infect several anti-virus utilities (see the string below).
On the 4th of any month, it displays the following message:
+-------------------------------------------------+
| I have one mesage to all people on earth : |
| Stop all French nuclear testing in the PACIFIC |
| Dont forgot :Comon people dont like nuc. tests! |
| This is is a MURUROA 1.386 by Blesk |
| PLUTONIUM IS BETTER IN POWER-PLANT !!!! |
| My greet to VYVOJAR,SVL,METABOLIS and all IRC. |
+-------------------------------------------------+
The virus also contains the text string:
.exe .com avg fv386 turbo fv86 guard toolkit scan virlab vir asta vc sswap debug td stacker alik rex msav cpav nod clean f-pro tbav tbdriver tbclean tbscan avast nav vshie dizz command vsafe

Mururoa.2467

Description Mururoa.2467

This is a relatively harmless, memory resident encrypted parasitic stealth virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are executed or closed. When an infected file is opened, the virus disinfects it. The virus doesn't infect several anti-virus utilities (see the string below). It has a bug and corrupts EXE files while infecting them.
On the 4th of any month, it displays the following message:
+-------------------------------------------------+
| I have one mesage to all people on earth : |
| Stop all French nuclear testing in the PACIFIC |
| Dont forgot :Comon people dont like nuc. tests! |
| This is is a MURUROA 1.386 by Blesk |
| PLUTONIUM IS BETTER IN POWER-PLANT !!!! |
| My greet to VYVOJAR,SVL,METABOLIS and all IRC. |
+-------------------------------------------------+
The virus also contains the text string:
.exe .com avg fv386 turbo fv86 guard toolkit scan virlab vir asta vc sswap debug td stacker alik rex msav cpav nod clean f-pro tbav tbdriver tbclean tbscan avast nav vshie dizz command vsafe

Home