Virus Database

VBS.AVM

Description VBS.AVM
WinScript.AVM is a family of parasitic viruses written in Windows Script language.
To replicate themselves they use File System Object (FSO). When run, the viruses locate the host file name, read the file contents, locate their body, search for all .VBS files in the Path directories and write themselves to the end of files. The viruses also scan and infect .VBS files the current directory as well as special directories: Desktop, MyDocuments, Startup.
The viruses also create the AVM.VBS dropper file in the Windows directory and register it in the system registry as the auto-run file. As a result, the virus dropper will be automatically executed by Windows on each rebooting.
The viruses contain the comments:
"AVM.a":

Nick "The Love Monkey" Virus Package by ALT-F4 and ALT-F11
for the Alternative Virus Mafia

"AVM.b":

allby ALT-F4 and ALT-F11 for the Alternative Virus Mafia

Check other viruses! Be aware! Use Antiviral Software

Croatia.1349

Description Croatia.1349

These are a very dangerous memory resident parasitic viruses. They hook INT 21h, 28h and write themselves to the end of .COM files that are executed. When infected files are opened or loaded for debugging, the viruses disinfect them, and infect again when the file is closed. While disinfecting the viruses create the temporary file ("Croatia.1349" - E, "Croatia.1535" - LARGE2.COM), copy the disinfected copy of the source file, and rename that file to the original name.
Depending on the system time and date the viruses decrypt the text string "Croatia" and overwrite the disk sectors with this string ("Croatia.1535" reads from the sectors instead of writing).

Croatia_II.560

Description Croatia_II.560

It is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed. The virus deletes the CHKLIST.MS file, if it exists. On February 12th it erases the hard drive sectors and displays the message:
Croatia must be free !
(c) 1995 by Inquisitor.

Home