Virus Database

Attention.394

Description Attention.394

It is a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of .COM files that are executed. While infecting, the virus writes 16 bytes of code and data to the file beginning :
+-----------------------------------------------------
¦JMP Loc_Virus¦A T T E N T I O N !¦1Ah¦ file
+-----------------------------------------------------
3 bytes 12 bytes 1 byte

While infecting, the virus hooks INT 24h, but does not restore its original value - this might hang the system.
The virus manifests itself upon infecting files on a write-protected disk in the A: drive: the motor is switched on (regardless what disk is being accessed). In infected files starting from the 4th byte you can find the string
ATTENTION !

Check other viruses! Be aware! Use Antiviral Software

Squatter.7310

Description Squatter.7310

This is a dangerous memory resident parasitic highly polymorphic and stealth virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are accessed. Depending on their counters the virus also infects the "C:DOSKEYB.COM" file, if it exists. The virus does not infect the anti-virus programs SCAN, TBAV, F-PROT. It also deletes the anti-virus data files: ANTI-VIR.DAT, CHKLIST.MS.
Because of bugs in the polymorphic engine the virus often cannot decrypt itself and halts the computer. On May 24th the virus displays the messages:
I've just squattered your system!!
- SQUATTER v1.0 - Coded by The Mental Driller

Squatter.8019

Description Squatter.8019

This is a dangerous memory resident parasitic highly polymorphic and stealth virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are accessed. Depending on their counters the virus also infects the "C:DOSKEYB.COM" file, if it exists. The virus does not infect the anti-virus programs SCAN, TBAV, F-PROT. It also deletes the anti-virus data files: ANTI-VIR.DAT, CHKLIST.MS.
Because of bugs in the polymorphic engine the virus often cannot decrypt itself and halts the computer. On May 24th the virus displays the messages:
I've just squattered your systemall again!!
- SQUATTER v1.1 - Coded by The Mental Driller

Home