BadBoy.991
Description BadBoy.991
This is a harmless memory resident parasitic encrypted virus. It hooks INT 21h and writes itself at the beginning of COM files are executed. This virus uses System File Table on infection. It is divided on 9 blocks of code and data (installation block, data block, INT 21h block e.t.c.). When the virus installs itself into the memory, 8 of these 9 blocks can be rearranged in any order depending on the system timer. On infection the virus saves encrypted image of its TSR copy into the file, so orders of code blocks in two infected file can be different.
The virus contains the text:
Cure_ME_DANIEL!
ANTI CRI I HOPE YOU BURN IN HELL ASSHOLES
Check other viruses! Be aware! Use Antiviral Software
Ava Family
Description Ava Family
These are the memory resident parasitic EXE-infectors. They hook INT 21h and write themselves at the end of EXE-files upon their execution or opening.
Ava.550
It's a harmless virus. Tt doesn't manifest itself.
Ava.600
It's a dangerous virus. It contains the text string " Ava " and sometimes changes the offset of the information saved.
Avalanche Family
Description Avalanche Family
These are dangerous memory resident encrypted stealth parasitic viruses. They trace and hook INT 21h, and write themselves at the end of COM- and EXE-files are executed, they delete some anti-virus programs. The viruses contain the internal text strings (the second string contains the beginnings of the file names, the viruses delete these files on their execution):
AVALANCHE/Germany '94allMetal Junkie greets Neurobasher
F-PR TBAV SCAN MSAV CPAV TBME TBFI TBSC VIRS TBDR
|