Virus Database


Weak.1253

Description Weak.1253

Weak.1253 is a memory resident dangerous parasitic stealth virus. It is compressed by utility PKLITE and after installation it reads its compressed body, saves it in memory and then uses while infection. The virus writes itself into file beginning when the file is created (when file is copied): the virus hooks DOS function Create, creates the file, writes into file the virus body and then returns to DOS. Then DOS appends the file to virus body. Therefore it is not necessary to check INT 24h, the file' date, time and attributes.
While access to file the virus uses the stealth algorithm: it hooks DOS function Lseek (ah=42h) and corrects the read/write pointer so that file looks like a clear. The virus also hooks DOS functions FindFirst and FindNext ASCII and correct the returned length of infected file. But the virus not checks the FCB Find functions and can break some utilities.
During installation into the system memory the virus uses the legal method - int 27h. The virus also corrects the Environment area: sets the owner name to COMMAND.COM. With this method the virus hides itself in memory. It also hooks INT 21h, 22h, 23h, 24h.
The virus contains the text: "Et tu vulneratus es sicut et nos, nostri similis effectus esall".

Check other viruses! Be aware! Use Antiviral Software

Nuker.BitchSlap

Description Nuker.BitchSlap

This is a Win32 program that attacks remote Windows machines. It uses an error in the network support Windows library and uses it to crash the remote system by a specially prepared "Out Of Buffer" (MSG_OOB) packet that is sent to port 139.
For more information see "DoS".

Nuker.CGSi

Description Nuker.CGSi

This is a Win32 program that attacks remote Windows machines. It uses an error in the network support Windows library and uses it to crash the remote system by a specially prepared "Out Of Band" (MSG_OOB) packet that is sent to port 139.
To protect machine(s) against such an attack, you should install the latest Windows update (Service Pack).

Home

Viruses from A to Z
0-9 A B Ñ D E F G H I J
K L M N O P Q R S T
U V W X Y Z




    Copyright © 2005 Virus-Database.com
© 2005 Virus-Database.com