Virus Database

Mururoa.3449.a

Description Mururoa.3449.a

This is a relatively harmless, memory resident encrypted parasitic stealth virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are executed or closed. When an infected file is opened, the virus disinfects it. The virus doesn't infect several anti-virus utilities (see the string below).
On May 4, 8, and 20, it displays the following message:
+-------------------------------------------------+
| I have one mesage to all people on earth : |
+-------------------------------------------------+
| All French nuc. test`s was STOPED. But MURUROA |
| IS DEAD !!!!! I am a coder of HELL FIRE and I |
| BRING YOU >>>>>> FIRE <<<<<< By Blesk/SVL |
|NOTE: Name of this virus is [MURUROA_END] |
| By Blesk from Slovak Virus Laboratories at .SK |
| Real name of BOZA is BIZATCH.. STUPID A-VERS !!!|
| PLUTONIUM IS BETTER IN POWER-PLANT !!!! |
| My greet to: VYVOJAR,SVL,VLAD,SKIMS,40-hex,IR |
+-------------------------------------------------+
| And to some my friends: DJ.Milan,DJ.Maros, |
| DJ.Babula(Baby),TINA-huhu,DURO,LACI,Duffy,Kaaa, |
| Stano alland more... A zdravim Mira Trnku 8)) |
+-------------------------------------------------+
The virus also contains the text string:
I am in LOVE now... ZUZANKA B.B. in Slovakia <:)<8<
I love PC Revue ....
For M.T.: Vivat Ziar nad Hronom.. 8)) Uz si rad ??
RADAR v PC Revue 9/94

Check other viruses! Be aware! Use Antiviral Software

Natas.4746

Description Natas.4746

This is a dangerous memory resident multipartite polymorphic virus. It hooks INT 13h, 21h and writes itself into MBR of hard drive, boot sectors of floppy disks and at the end of COM and EXE files that are accessed. It does not infect the files that are opened by PKZIP/PKUNZIP, LHA and ARJ archivators. Depending on its internal counters the virus formats disk sectors. It contains the internal text strings:
BACK MODEM

Natas

Natas.4774

Description Natas.4774

This is a dangerous memory resident multipartite polymorphic virus. It hooks INT 13h, 21h and writes itself into MBR of hard drive, boot sectors of floppy disks and at the end of COM and EXE files that are accessed. It does not infect the files that are opened by PKZIP/PKUNZIP, LHA and ARJ archivators. Depending on its internal counters the virus formats disk sectors. It contains the internal text strings:
BACK MODEM

Time has come to pay (c)1994 NEVER-1

Home