Virus Database

Sfrust.632

Description Sfrust.632

It is a very dangerous nonmemory resident parasitic virus. It searches for .COM files and writes itself to the end of the file. Sometimes it erases the FAT and displays:
Sfrustrowany student v.1.1 RevSoft K-ce.

Check other viruses! Be aware! Use Antiviral Software

Invisible.b

Description Invisible.b

This is a dangerous memory resident multipartite polymorphic virus. It hooks INT 13h, 1Ch, 21h and writes itself at the end of COM and EXE files. On execution of infected file it hits MBR of hard disk. The virus is polymorphic in MBR also. On loading from infected disk the virus infects the files. Depending on current date it overwrites the files by the program which on execution plays the tune and types the message:
I'm the invisible man,
I'm the invisible man,
Incredible how you can
See right through me.
I'm the invisible man,
I'm the invisible man,
It's criminal how I can
See right through you.
These viruses also contain the internal text:
The Invisible Man II - Written in SALERNO (ITALY), December 1992. Dedicated
to E.F.: I don't know either how or when, but I will hold you in my arms
again.

Invol Family

Description Invol Family

These are dangerous memory resident parasitic viruses. They infect EXE and SYS files. These viruses are polymorphic in the EXE files.
When an infected EXE file is executed, the virus opens the C:CONFIG.SYS file, looks for the first SYS file which is pointed by the "DEVICE=" string, and infects it. If there are not such SYS files, the virus in some cases creates the dummy VANSI.SYS file and places the command DEVICE=VANSI.SYS to the beginning of CONFIG.SYS file.
When the computer boots from the 'infected' CONFIG.SYS, the virus stays resident as a system driver, hooks INT 21h and writes itself to the end of EXE files that are executed.
These infectors contain the text strings:
c:config.sys EVICE C:vansi.sys device=vansi.sys vansi

On the 19th of any month they erase the FAT of C: drive, and display the message:
You have helped spread this virus.
This has been a message from your friendly
neighborhood infection service.
Thank you for your involuntary cooperation.

Home