Virus Database


Paraguay.834

Description Paraguay.834

It is not a dangerous nonmemory resident parasitic virus. It searches for COM files, then writes itself to the end of the file. It deletes the anti-virus databases ANTI-VIR.DAT and CHKLIST.MS if they exist. On May 15th it displays the messages:
Xx VIRUS PARAGUAY xX
|-> Written by Int13h <-|
¡VIVA LA INDEPENDENCIA!
[ DIABOLICAL KREATIONS ]
=- First paraguayan virus group. Up the virus-scene!

Check other viruses! Be aware! Use Antiviral Software

Kontragapi

Description Kontragapi

It is a dangerous memory resident polymorphic parasitic virus. The virus does work only if system date's year is 1998, otherwise the virus does not install itself into the system memory. While installing the virus hooks INT 21h and writes itself to the end of COM files that are accessed. The virus corrupts several anti-virus programs: if filename begins with F-, TB, AV, VIR, SCAN, KILL (F-PROT, TBAV, AVP etc), the virus writes to the file header a small program that displays the message:
kontragapi

This is the "Entry Point Obscuring" virus, i.e. there is no JMP_Virus instruction at the file header. The virus uses one of standard tricks to write the JMP_Virus to the middle of the file: it reads file header, disassembles it at looks for suitable place for the JMP_Virus code.

Korea

Description Korea

It's a harmless memory resident virus which hooks INT 13h and infects by a "Stoned" manner the floppies disk Boot-sectors. It contains the text "virse program messge Njh to Lbc".

Home

Viruses from A to Z
0-9 A B Ñ D E F G H I J
K L M N O P Q R S T
U V W X Y Z




    Copyright © 2005 Virus-Database.com
© 2005 Virus-Database.com