Perfume Family
Description Perfume Family
These are very dangerous memory resident parasitic viruses. They write themselves to the end of the .COM files. Being executed these viruses infect the COMMAND.COM file, then they hook INT 21h, stay memory resident, and then they infect the files that are executed. While installing into the memory they do not fix MCB list, that may halt PC.
Sometimes they erase the random sectors on the floppy disk. On the 80th attempt to infect already infected file the virus runs a dialogue, it displays:
Bitte gebe den G-Virus Code ein :
and waits for "4711" input. If this string is entered, the virus displays:
Tut mir Leid !
"Perfume.731" also contains the text:
G-VIRUS V1.3
"Perfume.731.b" contains/displays the texts:
IRA Virus 18
Irish Republican Army v18 Virus :
hat
By Capt Picard
Check other viruses! Be aware! Use Antiviral Software
Einvolk.521
Description Einvolk.521
This is a non-memory resident parasitic virus. It searches for COM files of the current and parent subdirectories and writes itself to the end of the files that are found.
This is a dangerous virus. In November, it formats hard drive sectors and displays:
Big brother is watching you.
Virus Factory 93
Eka.4096
Description Eka.4096
It is not a dangerous memory resident parasitic virus. It hooks INT 10h, 17h, 21h and writes itself to the end of COM and EXE files. To infect files the virus intercepts file execution, then search for files and infects them. Depending on its internal counter the virus changes characters that are printed. Depending on the system conditions the virus displays the picture:
+--------------------------+
| Beware of the 'Virus |
| xxxxx X xx xxxxx |
| xxxx Xxx xxxxx |
| xxxx x x x x |
+--------------------------+
|
Home
Viruses from A to Z
0-9
A
B
Ñ
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
|