MTZ.2624
Description MTZ.2624
This is a benign memory resident parasitic polymorphic and stealth virus. Being executed it checks DOS version and installs itself as memory resident under DOS 5.0 or above. If there is free block of upper memory, this virus copies itself into UMB. This virus infects files on FindFirst/FindNext DOS calls. On opening an infected file the virus disinfects it.
The virus hooks INT 21h and writes itself to the end of EXE files (except SCAN.EXE). Depending on the system timer it displays the message:
Overkill IV Virus - By MTZ - From Italy - <Hit any key to continue>
(Cazzo! Anche oggi un altro 2 di picche, ma si puo' andare avanti cosi' ?)
Check other viruses! Be aware! Use Antiviral Software
Avalanche Family
Description Avalanche Family
These are dangerous memory resident encrypted stealth parasitic viruses. They trace and hook INT 21h, and write themselves at the end of COM- and EXE-files are executed, they delete some anti-virus programs. The viruses contain the internal text strings (the second string contains the beginnings of the file names, the viruses delete these files on their execution):
AVALANCHE/Germany '94allMetal Junkie greets Neurobasher
F-PR TBAV SCAN MSAV CPAV TBME TBFI TBSC VIRS TBDR
Avalgasil.666
Description Avalgasil.666
It is a harmless memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are opened or accessed with FindFirst ASCII DOS-calls. DOS also performs that call while file executing, so the virus also infects the files that are executed. The virus checks the name of the file, and does not infect A*.EXE files. The virus contains the internal text string:
(Avalgasil)666
|