Virus Database

Avispa Family

Description Avispa Family

These are dangerous memory resident parasitic polymorphic viruses. They hook INT 13h, 21h and write themselves to the end of EXE-files that are executed. On reading from disk sectors these viruses, depending on the system timer substitute the data buffer by the string:
$$ Virus AVISPA $$ Republica Argentina$$ Elijah Baley $$ Noviembre 10 de
1993 $$ This program is not an old virus variant, and it was written in
Argentina by Elijah Baley. It uses polymorphic technics to avoid
conventional scanning. $$ MENEM: Libertador de torturadores y asesinos de
inocentes, que Dios se apiade de tu po

These viruses contain the internal text string also:
__ Virus Avispa - Buenos Aires - Noviembre 1993 __

"Avispa.2048.b" contains the list of files that are infected on virus installation:
c:dosxcopy.exe
c:dosmem.exe
c:dossetver.exe
c:dosemm386.exe

Check other viruses! Be aware! Use Antiviral Software

IntOv Family

Description IntOv Family

These are dangerous memory resident parasitic viruses. They hook INT 21h and infect COM and EXE files that are executed or opened. While infecting a file the virus writes its "loading" code (69h bytes) to the entry point of the file, then writes the rest of its code to the end of the file. When an infected file is executed, the virus loader reserves a block of the system memory, copies itself into there, gets the name of the host file and reads the rest of the virus code. Then the virus restores the code of the host file and releases the control.
The viruses infect only the COM files that contain the JMP NEAR (E9h) instruction at the beginning of the file. While infecting EXE files the viruses check the relocation table to prevent overlapping the virus loading code with relocated words.
The viruses have bugs and may halt the system while infecting a file. The viruses contain the text strings:
"IntOv.685":
COMEXEexecom
[IntOv]

"IntOv.708":
COMEXEexecom
[Internal Overlay, Tcp / 29A]

Intrep Family

Description Intrep Family

These are harmless nonmemory resident parasitic viruses. They search for .COM and .EXE files and write themselves to the end of the file. They contain the text string:
*.com *.exe

"Intrep.1092" also contains the text:
A trip into the realm of intelligent replicationall

Home