Virus Database

Win32.AOC

Description Win32.AOC

This is a benign non-memory resident parasitic polymorphic Win32 virus. It searches for PE EXE files in the current Windows and Windows system directories and infects them. The virus infects .EXE files as well as .DLL libraries. While infecting, the virus writes itself to the end of the file.
The virus avoids detection in several anti-virus programs by detecting them according to the first two letters in the file name: AV*, AN*, DR*, ER*, OD*, TB*, F-*.
Depending on its "generation," the virus displays the following text:
< [AOC] - Anvil of Crom virus Coded by Bumblebee/29a >

Check other viruses! Be aware! Use Antiviral Software

Bandersnatch

Description Bandersnatch

Bandersnatch is a not dangerous memory resident stealth polymorphic parasitic virus. It traces and hooks INT 21h, and writes itself at the end of COM- and EXE-files are accessed. Its polymorphic routine slows down the computer very much. Sometimes it calls the trigger routine that slowly puts the screen out. It contains the internal text string in Russian and:
DOS-UP
What's fuck?

Baphometh.1536

Description Baphometh.1536

It is a dangerous memory resident multipartite virus. It infects the MBR of the hard drive, boot sector of floppy disks and writes itself to the end of COM and EXE files that are executed.
While infecting the MBR the virus overwrites the Disk Partition Table, as a result the MBR cannot be disinfected by the "FDISK /MBR" command. The virus also deletes the C:WINDOWSSYSTEMIOSUBSYSHSFLOP.PDR file. It contains the encrypted text string:
Baphometh v2 ~CAD

When an infected file is executed the virus infects the MBR, hooks INT 21h, stays memory resident and then affects executable DOS files. On loading from infected disk the virus hooks INT 8 (timer), INT 13h, waits for DOS loading process and then hooks INT 21h. By hooking INT 13h the virus runs its floppy disk infection and stealth routines - on accessing to infected MBR or boot sector the virus replaces it with its original code and data.

Home