Virus Database

Astron.1056

Description Astron.1056

It is a very dangerous nonmemory resident parasitic virus. It searches for .COM files, then writes itself to the end of the file. The virus contains the text string:
Astron.Solar by 1996-96 Inc.

The virus is not memory resident, but leaves a TSR program that hooks INT 1Ch, 21h and in some time decrypts and displays a message in Russian.
On 27th of any month the virus writes to the boot sector of C: drive the JMP-to-Reboot instruction (JMP FFFF:0000) and the same text in Russian.

Check other viruses! Be aware! Use Antiviral Software

Gorgan.2718

Description Gorgan.2718

It is not a dangerous memory resident polymorphic, stealth parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or created. The virus also infects the C:COMMAND.COM file. The virus scans the C:CONFIG.SYS file as well and infects files which are refferred in there. The virus deletes the antivirus data file: CHKLIST.MS. It doesn't infect files with names:
TOOLKIT, FINDVIRU, GUARD, SCAN, CLEAN, TKUTIL, VIVERIFY, INSTALL, CERT,
AUTHOR, FV, IMEN, AUTOHARD
The virus contains the text string:
This is 'GORGAN' by M.S.S(designer of 'sarcoma').

Gorilla

Description Gorilla

This is a dangerous, memory resident boot virus. It hooks INT 13h, and writes itself to the boot sectors of floppy disks and to the MBR of the hard drive. It infects floppy drives that are accessed, and writes itself to the MBR sector upon loading from an infected floppy disk. In September, the virus erases the CMOS memory.

Home