BG.1348
Description BG.1348
This is not dangerous memory resident encrypted parasitic virus. It hooks INT 8, 21h and writes itself to the end of EXE files that are executed or renamed. In April the virus returns wrong data on GetTime DOS call. In January it displays the following message:
Seems so simple now
Now that the sky is clear
Maybe the road was tough
But at last we're here
I've nothing to hide from you
Nothing to explain
Just this vision of broken wing
And the raven cries in painall
Enter the name of song:
The virus then waits for some input, calculates its CRC and halts the computer if CRC is wrong.
Depending on its internal counters the virus drops the letters on the screen and manifests itself by a video effect.
Check other viruses! Be aware! Use Antiviral Software
Ava Family
Description Ava Family
These are the memory resident parasitic EXE-infectors. They hook INT 21h and write themselves at the end of EXE-files upon their execution or opening.
Ava.550
It's a harmless virus. Tt doesn't manifest itself.
Ava.600
It's a dangerous virus. It contains the text string " Ava " and sometimes changes the offset of the information saved.
Avalanche Family
Description Avalanche Family
These are dangerous memory resident encrypted stealth parasitic viruses. They trace and hook INT 21h, and write themselves at the end of COM- and EXE-files are executed, they delete some anti-virus programs. The viruses contain the internal text strings (the second string contains the beginnings of the file names, the viruses delete these files on their execution):
AVALANCHE/Germany '94allMetal Junkie greets Neurobasher
F-PR TBAV SCAN MSAV CPAV TBME TBFI TBSC VIRS TBDR
|