Staf.2083
Description Staf.2083
It is not a dangerous nonmemory resident parasitic virus. It searches for .COM files and writes itself to the beginning of the file. While infecting a file the virus displays the messages:
Virus Demo Ver.: 1.1 - Handle with care!
By STAF (Tel.: (819) 595-0787)
Generation #
This program has been infected by:
VIRUS ERROR # - Aborting process.
Needs DOS version 2.0 and above.
Infecting:
Press any key to execute original programall
I have infected all your files in the current directory!
Have a nice day!
Check other viruses! Be aware! Use Antiviral Software
Lucy family
Description Lucy family
These are dangerous memory resident parasitic polymorphic viruses. They hook INT 21h and write themselves to the end of COM and EXE files that are accessed, except several anti-viruses and utilities (see the list below). While installing memory resident the viruses also scans the system memory for several anti-virus monitors and disable them.
The viruses have bugs and in some cases halts the computer. Under debugger "Lucy.5286" displays the message:
Hi, do you know that AndreaP is actually better than LucyV ?
Takze ak sa vam chce, tak to meno zmente. :-).
PS. Pochadzam[e] (ja i ona) z GJH. (mozno)
Press any key to reset.
The viruses also contain the texts:
* EMM386 *
COM EXE
TBMEMXXXTBCHKXXXTBDSKXXXTBFILXXXCOMMAND
"Lucy.5086":
COM EXE SCAN VSHIELD CLEAN FINDVIRU GUARD VIVERIFY
TB -V VIRSTOP NOD HIEW ICE AVG F-PROT CHKDSK DRWEB
"Lucy.5286":
SCAN VSHIELD CLEAN FINDVIRU GUARD VIVERIFY TB AVP
VIRSTOP NOD HIEW ICE AVG F-PROT CHKDSK DRWEB TD
scanning
Luky.1083
Description Luky.1083
This is a very dangerous memory resident parasitic virus. It hooks INT 21h, and writes itself to the beginning of COM files that are accessed by DOS FindNext function (DIR command). On the 13th of any month (except January), the virus displays the following message, and waits for Y/N keystroke:
My Dear:
Happy BirthDay And Wish You Luky Forever !
I love you forver .
Do you Like this virus ?(Y/N)
When pressing the 'Y' key, the virus does not perform any action; and when pressing the 'N' key, it formats hard drive sectors. On January 13th, the virus formats the hard drive without any message.
|