Virus Database

Weed.4080

Description Weed.4080

It is a very dangerous nonmemory resident parasitic virus. It is an EXE file packed with LzExe. Being executed it searches for .COM and .EXE files in current and PATH directories, then writes itself to the beginning of the file. While infecting the virus encrypts the original file header and writes it to the end of the file.
The virus has a bug and corrupts files of small length. It also deletes the CHKLIST.MS if it exists. The virus contains the text strings:
WEED - v1.1
*.exe *.com
path
chklist.ms

Check other viruses! Be aware! Use Antiviral Software

Rubix family

Description Rubix family

These are dangerous nonmemory resident encrypted viruses. They search for .COM files in the current directory, then overwrite them. The viruses have several blocks of code and data, these blocks are encrypted/decrypted on-the-fly when viruses are run. The viruses contain the text strings:
*.COM
Well, this is a new overwriting virus. K00l, huh? Not really.
But it encrypts different sections of itself during executioner,
and that's neat.
Coder: Executioner

Ruchawi.2560

Description Ruchawi.2560

This is a dangerous non-memory resident parasitic virus. It searches for EXE files, and writes itself to the end of the file. On December 14th, it displays the following message, and encrypts the MBR sector of the hard drive:
Today is my birthday. /// Dzisiaj obchodze urodziny.
Wish me all the best. /// Zycz mi wszystkiego najlepszego.
Ruchawi(R)

It also displays the messages:
Do not turn off your machine for 5 days, because most important data
from your HD may be lost!!!
Nie wylaczaj swojego komputera przez 5 dni, bo mozesz stracic
wazne dane z twardego dysku!!!
You work too much!!! Go to bed!!!
Pracujesz zbyt wiele!!! Idz spac!!!
Now, you can turn off your machine.
Mozesz wylaczyc komputer.

Home