Virus Database

Backdoor.Win32.Breplibot.b

Description Backdoor.Win32.Breplibot.b
This program can be used for remote administration of the victim machine via IRC channels. The program itself is a Windows PE EXE file 10240 bytes in size, packed using UPX. The unpacked file is approximately 31KB in size. The backdoor was originally distributed using spamming technologiesall.

Check other viruses! Be aware! Use Antiviral Software

SRX.2304

Description SRX.2304

It is a very dangerous memory resident parasitic virus. It hooks INT 21h and when files are created or executed, it searches for .COM and .EXE files and writes itself to the end of file. The virus has bugs and corrupts some files while infecting them. While infecting the virus also deletes the anti-virus data files CHKLIST.CPS and CHKLIST.MS.
On December 2nd it erases hard drive sectors, decrypts and displays the message:
25 WAYS TO PREVENT A VIRUS ATTACKall.
No.2 ALWAYS USE CONDOMS !!
No.25 SELL YOUR COMPUTER !

While installing memory resident from an infected EXE file the virus does not return control to the host program, but displays standard DOS error message "Bad command or file name" and returns to DOS. As a result infected EXE files do work only if the virus is already active in the system memory.
The virus contains the ID-string:
SRX

SSH Family

Description SSH Family

These are not dangerous memory resident parasitic viruses. They hook INT 5, 8, 16h, 17h, 21h, 24h and on some DOS calls (INT 21h, AH=0Dh, 15h, 16h, 22h, 28h, 3Ch, 68h, 5Ah, 40h) they search for .COM files of current directory and write themselves to the beginning of the file. While infecting a file these viruses copy themselves and then the file body to the newly created file .SSH, delete original file and rename already infected .SSH file back to the original name. The viruses checks keyboard input for the string "My sister is SSH", launch internal counter and depending on these and some other cases they manifest themselves by a video effect (on Hercules card), disable output to printer and the PrintScreen function.

Home