Virus Database

Raadioga.1000.a

Description Raadioga.1000.a

It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h, on DOS calls SetDTA, SetDrive, FindFirst, ChangeDir (these calls are performed when programs are executed, current disk or directory are changed) the virus searches for .EXE files in the current directory and writes itself to the end of the file. The virus does not infect several anti-virus programs (including AVP) according to the string "F-SCTBAVVIVS" - two bytes per name: F-*, SC*, TB*, AV*, VI*, VS*.
On March 10th the virus corrupts the CMOS and displays the message:
HAIGUSTE RAVI KONTROLLITUD VAIKUSE PIMEDUSE JA RAADIOGA

The virus also contains the text strings:
NiL
*.EXE

Check other viruses! Be aware! Use Antiviral Software

Lamento.2690

Description Lamento.2690

It is a very dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are accessed. While installing the virus also infects the C:COMMAND.COM and C:DOSMODE.COM files. The virus checks the file name, and does not infect the files that begin with any of the strings:
PCVIR CENTINEL SCAN CLEAN VSHIELD ATM TB CPAV MSAV TNT FINDVIR VC VREMOVE
VSMENU VSCHK MM. KEYB.

On January 21st the virus sets the system date to January, 20th, then deletes C:AUTOEXEC.BAT and C:CONFIG.SYS files, renames to the random names all the files in subdirectories of C: drive:
DOS MSDOS SYS DRDOS IBMDOS
WINDOWS WIN WIN3 WIN30 WIN31 WIN311

While processing Windows' directories the virus looks also for SYSTEM subdirectory. Then the virus displays the messages:
Lamento tener que comunicarle que hoy es 21 de Enero all
... ha sido una cortes¡a de Woi

Lamerman

Description Lamerman

It is a very dangerous memory resident multipartite virus. It infects the MBR of the hard drive and overwrites EXE files that are created or copied, i.e. the virus does not affect existing EXE files but newly created/modified files only.
When an infected file is executed the virus affects the MBR and halts the computer, while infecting the virus fools the BIOS virus protection by a simple keyboard trick. On rebooting the virus stays memory resident, hooks INT 13h and overwrites EXE files on writing to them.
The virus contains the text string:
Lamerman .01

Home