Virus Database

Olivia.2374

Description Olivia.2374

This is a very dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are accessed. Duplicate infection is possible. In some cases, the virus writes the "jump-to-virus" instruction to the middle of COM files. The virus checks the names and do not infect the following files:
4DOS, COMMAND, VT, WIN, EMM386, SSCAN, TB, CHKDSK
The virus uses anti-debugging tricks and disables several anti-virus resident monitors. On December 23rd it launches its trigger routine. This routine checks the CD-ROM installed and displays the following message:
please put a love music CD into your CD-ROM
and pass any key to continueall
Then it summons several system CD-ROM access functions (plays CD-ROM?). Then the virus displays some text (possibly in Chinese) including the text:
By André '97/1/30
The virus then erases the CMOS and hard drive sectors.
It also contains the text strings:
Olivia Virus 7.5 By André
(C)TRAN TECH United Groups

Check other viruses! Be aware! Use Antiviral Software

Config_Boot.b

Description Config_Boot.b

This is harmless memory resident multipartite virus. It's related to the "HMA_Boot" multipartite virus. It creates a file-dropper in the root directory of the C: drive and appends the instruction to load this file into memory ("INSTALL=") to the end of the C:CONFIG.SYS file. The virus also infects the boot sector of drive A: when selecting this drive. To intercept that, the virus hooks INT 21h. While loading from an infected floppy disk the virus also hooks INT 1Ah.
It contains a text string:
C:CONFIG.SYS INSTALL=

Congratulations

Description Congratulations

It's a dangerous not memory resident parasitic encrypted virus. It searches for EXE-files and writes itself at their ends. In some cases it deletes the file instead of infection. Depending on its generation number it displays the message:
Congratulations, you have a virus

Home