Virus Database

Win32.AutoWorm.3072

Description Win32.AutoWorm.3072

This is a primitive worm virus about 3Kb of size. It spreads under Win32. When it starts, it copies itself with the "AutoWorm.exe" name to root directories on all available drives (including floppy drives), and creates there the files "Autorun.inf" with one command in file:
[autorun]
OPEN=AutoWorm.exe

The "AutoRun.inf" file is automatically processed by Windows when the CD-ROM is accessed, so the virus is not activated when the infected floppy disk or local hard drive is accessed.

Check other viruses! Be aware! Use Antiviral Software

Badguy Family

Description Badguy Family

These are dangerous non-memory resident viruses. They overwrite the beginnings of .COM-files of the current directory without storing the old contents of these files. They contain the text: "*.COM".
On Monday, "Badguy.265" creates something with CGA monitor ports, and then hangs-up the computer. It also contains the text "BadGuy Virus (c) by Cracker Jack 1991 (IVRL) Italian Virus Research Laboratory (C) 1990,1991 IVRL Head Quarter, Milan Italy".
On Monday, "Badguy.208" decrypts and types: "New BadGuy Virus - (c) By Cracker Jack 1991 IVRL Head Quarter Milan, Italy".

BadSectors.3150

Description BadSectors.3150

These are dangerous memory resident parasitic viruses. They hook INT 8, 16h, 21h, 25h, 26h. On DOS calls FindFirst/FindNext FCB/ASCII they search for COM and EXE files and write themselves to the end of the file. They also infect the files that are opened, executed or renamed. The viruses do not infect the SCAN.* files. Sometimes they mark the disk clusters as bad ones by manipulation with FAT sectors. By hooking INT 16h these viruses joke with keyboard. These viruses contain the internal text strings:
COMEXE
SCAN

and:
"BadSectors.3150": BadSectors 1.0
"BadSectors.3422": BadSectors 1.1
"BadSectors.3428": BadSectors 1.2
"BadSectors.3627:: BadSectors 1.3

Home