Virus Database

Muhamor.4608

Description Muhamor.4608

It is a dangerous memory resident polymorphic double-encrypted parasitic virus. It hooks INT 12h, 21h and writes itself to the beginning of COM and to the middle of EXE files that are executed or opened. The virus has bugs and may corrupt EXE files while infecting them. The virus does not infect files with names: *WE?.*, *AN?.*, *38?.*.
Depending on its internal random counter the virus patches the standard Windows95 logos "Please wait while your computer shuts down" and "It's now safe to turn off your computer" - it writes to the top of these logos an image of fly-agaric mushroom ("muhomor" in Russian).

The virus contains the text strings:
.E.C.e.cXEOMxeom
weANanaNAnWE38
Muhamor virus ver 1.1
Version 1.1
C:WINDOWSLOGOS.sys
C:WINDOWSLOGOW.sys

Check other viruses! Be aware! Use Antiviral Software

Steatoda family

Description Steatoda family

These are very dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the beginning of COM and to the end of EXE files that are executed or opened. After infecting a file the viruses erase random selected sectors on the hard drive.
Before installing memory resident the viruses look for C:DAMAGE.MOR file. If that file is found, the viruses do not stay resident, but decrypt and display the message:
This file is infected by "Steatoda", you seem to have the protection, soall
you will not be harmed by the virus.
Press any key...

The viruses also contain the text strings:
"Steatoda"
EXE COM
C:DAMAGE.MOR

Steppan.736

Description Steppan.736

It is not a dangerous memory resident parasitic virus. It hooks INT 1Ch,21h and writes itself to the end of .COM files that are executed or opened. The virus "disables" Left-Shift key. Depending on its counter it displays the message:
Your PC is infected with DEATH virus - greeting from Steppan

The virus also contains the text strings:
Death
COMSPEC

Home