Virus Database

WereWolf family

Description WereWolf family

These are dangerous parasitic viruses. Depending on the system timer they corrupt the hard drive sectors, "WereWolf.1500" corrupt the random selected byte in the data buffer while writing to a disk (INT 13h, AH=3).
"Werewolf.Wave" are polymorphic viruses. "Wave.2845" has a bug and corrupts COM files while infecting them.
The viruses contain the text strings:
"WereWolf.658,678": Home Sweap Home (C)1994-95 WereWolf
"WereWolf.684.a": CLAWS (C)1994-95 WereWolf
"WereWolf.684.b,685": FANGS (C)1994-95 WereWolf
"WereWolf.1152": SCREAM (C)1996 WereWolf
"WereWolf.1168": SCREAM! (C)1995-96 WereWolf
"WereWolf.1192,1193,1208": BEAST (C)1995 WereWolf
"WereWolf.1367": FULL MOON (C)1995-96 WereWolf
"WereWolf.1450": [WULF] 1996 WereWolf
"WereWolf.1500.a": WULF 1996 WereWolf
"WereWolf.1500.b": [WULF] (c) 1995-1996 WereWolf
"Wave.2662,2845": WAVE v0.9 WereWolf Advanced Viral Encryption
[HOWL] (c)1996 WereWolf

"WereWolf.658,678,684,685" are nonmemory resident encrypted viruses. They search for .EXE files, then write themselves to the end of the file. The viruses search for *.MS, *.CPS, ANT*.DAT files, and delete them.
"WereWolf.1152,1168,1192,1193,1208,1367,1500" are the memory resident viruses, "WereWolf.1152,1367,1500" are encrypted ones. The viruses hook INT 21h and infect the COM and EXE files that are executed or opened.
"WereWolf.1192,1193,1208" write themselves to the beginning COM files, and to the end of EXE file, other viruses write themselves to the end of the COM and EXE files.
These viruses do not affect the files:
"WereWolf.1152": CLEAN AVP TB V SCAN NAV IBM FINDV GUARD FV CHKDS F-
"WereWolf.1208": CLEAN AVP TB QB SCAN COMM NAV V FINDV GUARD FV CHKDS F-PR
"WereWolf.1367": CLEAN AVP TB V SCAN NAV IBM FINDV GUARD FV CHKDSK F-
"WereWolf.1500": CLEAN AVP TB V SCAN NAV IBM FINDV GUARD FV CHKDS F-
"Wave.2662,2845": CLEAN AVP TB V SCAN NAV IBM FINDV GUARD FV F- MEM CHKDSK

Check other viruses! Be aware! Use Antiviral Software

Mutation.1353

Description Mutation.1353

It is not a dangerous memory resident polymorphic parasitic virus. It hooks INT 21h and writes itself to the end of COM files. On executing files or changing current disk the virus looks for COM files in the current directory, and infects them. The each next generation of the virus adds extra bytes to files while infecting them.
The virus contains the text strings:
Mutation Virus 96
Mutation Virus V0.1 - Your computer has been artificially Phucked!

Mutator Family

Description Mutator Family

These are dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM files that are executed. They contain errors and sometimes infect the files incorrectly.
"Mutator.307" does not check neither the file format nor file name extension and infect EXE files as COM files, as a result these files halts being executed. This virus contains the text string:
Mutator v2.0b

"Mutator.459" contains the text:
MUTAtOR (C) Mutation Inc.

"Mutator.780" is the encrypted virus. Under tracing it displays the message:
Fuck you, asshole!!! You're using a Debugger!!!

On October, 30th it displays:
Hey! Holloween almost here!
Better be good, or the demon's will get you!

It also contains the text:
[Mutator] C/B: MainFrame [Mutation INc.]

Home