Virus Database

Slovakia.II.3584.c

Description Slovakia.II.3584.c

This is a harmless memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. It contains the text strings:
I'am SLOVAKIA virus Version 1.2 Copyright (c) 1994 SVL
chklist.ms chklist.cps smartchk.cps svl.svl
.exe .com
scan avg vir asta alik rex msav cpav nod clean
f-pro tbav tbuti avast nav vshie dizz vsafe
It displays the first (and second) strings, deletes the files from third (second) string. The fourth (third) string contains the file name which is used on infection (the virus renames the file into that name on infection and then renames back). The next string contains the file names which are not infected by this virus.

Check other viruses! Be aware! Use Antiviral Software

MidInfector.760

Description MidInfector.760

This is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed.
The virus contains the text string:
MidInfector by Dark Slayer of [TPVO]
The virus writes "JMP VirusCode" instruction to the file middle. While infecting the virus reads the file into the system memory, and disassembles the file code instruction-by-instruction (the virus contains primitive disassembler). The disassembler stops at interrupt calls (CD), jumps on condition (Jcc), FAR JMP/CALL, and some other instructions, and the virus overwrites that instruction with "JMP VirusCode".

MidInfector.765

Description MidInfector.765

This is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed.
The virus contains the text string:
MidInfector by Dark Slayer of [TPVO]
The virus writes "JMP VirusCode" instruction to the file middle. While infecting the virus reads the file into the system memory, and disassembles the file code instruction-by-instruction (the virus contains primitive disassembler). The disassembler stops at interrupt calls (CD), jumps on condition (Jcc), FAR JMP/CALL, and some other instructions, and the virus overwrites that instruction with "JMP VirusCode".

Home