Virus Database

Trojan-PSW.Win32.Lineage.ha

Description Trojan-PSW.Win32.Lineage.ha
This Trojan belongs to a family of programs designed to steal system passwords. It steals confidential data about the victim machine, including passwords and information entered via the keyboard. The Trojan itself is a Windows PE EXE file approximately 68KB in size, packed using ASPack. Theall

Check other viruses! Be aware! Use Antiviral Software

SG_Bomber family

Description SG_Bomber family

These are harmless nonmemory resident encrypted parasitic viruses. They search for COM files, then write themselves to the end of the file. While infecting the viruses write several parts of code that pass control to the virus code. The first block passes control to the second one, second jumps to third and so on up to ten jumps. The same technology is used by "Bomber" parasitic virus.
This viruses contain the text strings:
(c) Copyright by Beast.
(c) Stealth Group Bishkek.
(c) Stealth Group World Wide.
Infection by Beast. v0.91
Stealth Group World Wide.
[Bomber v1.0] by Beast. Stealth Group World Wide.

SH.2062

Description SH.2062

It is a very dangerous memory resident parasitic virus. It hooks INT 8, 9, 13h, 21h and writes itself to the end of COM and EXE files that are executed.
While infecting a file the virus gets the system date, adds random value (0-15 days) to this date and saves the result as a trigger date. On trigger date the virus runs its effects: manifests itself by some video effect, beeps on INT 21h calls, depending on its random counter disables writing to disks via INT 13h (that may corrupt the data on disks), changes the keyboard flags and the data in keyboard buffer.
The virus contains the ID-string:
SH

Home