Virus Database

Mutant.1680

Description Mutant.1680

These are not dangerous memory resident polymorphic viruses. They trace INT 21h, hook INT 1Ch and 21h and then write themselves to the COM and EXE files that are executed. Some time after the activation they plays a tune. They contain the text:
mutant

The viruses use two fairly sophisticated routines. The first one is the polymorphic routine, as a result the length of decryption rouitne varies between 65 and 149 bytes. The second routine is used to infect the files:
the virus looks for the areas that contain the constant bytes, and stores the offsets and lengths of these areas. If total length of these areas is lesser that the virus length, the virus does not infect that file.
the virus compresses these areas, and saves to its code the offsets, lengths and data to restore these areas before return the control to the host program.
the virus selects in the file the block of code, moves that code to the areas that were compressed, and overwrites that block with the encrypted virus code.
As a result, after infection of a file its length doesn't change. The virus re-infects the files, if there still are the areas with constant data. The virus stops infecting if all such areas are compressed.

Check other viruses! Be aware! Use Antiviral Software

India

Description India

It's not dangerous memory resident boot virus. It hooks INT 13h and hits MBR of hard drive and boot sectors of floppies. It displays the message:
Made in India

Indonga.2062

Description Indonga.2062

This is a very dangerous memory resident encrypted parasitic virus. It hooks INT 21h, and writes itself to the end of COM and EXE files. Depending on the system date, the virus corrupts the CMOS, or plays some data by a sound blaster, or returns to DOS instead of the host program.
This virus infects all files that are executed except COMMAND.COM. On September 22 and 24, it erases the disk sectors and displays the following message:
PINDONGA Virus V1.4. (Hecho en ARGENTINA)
Programado por: OTTO (16/9/77)
Saludos a: MAQ-MARIANO-SERGIO-ERNESTRO-COSTRA
PD: Alguien mate a Bill Gates (El WINDOWS SE CUELGA)

Home