Virus Database

Win32.Cafet

Description Win32.Cafet

This is a very dangerous non-memory resident parasitic Win32 virus. It searches for PE EXE files with .EXE and .SCR extensions in current and Windows system directories, then writes itself to the end of the file.
The virus deletes anti-virus data files:
ANTI-VIR.DAT
CHKLIST.TAV
CHKLIST.MS
AVP.CRC
IVB.NTZ
On the 12th of each month, the virus displays the following message box:
VIRUS CEFET-RJ
FORA F.H.C.
MAIS VERBAS PARA NOSSAS ESCOLAS
MADE IN BRAZIL - 1999
FEITO POR: N.B.K.
then creates and, depending on the system timer, spawns the D.BAT DOS batch file with "deltree" instruction in there.

Check other viruses! Be aware! Use Antiviral Software

Leonardo.2085

Description Leonardo.2085

It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed. The virus deletes the anti-virus databases: ANTI-VIR.DAT, FINGERP.VVF, FILES.VVL, CHKLIST.MS, *.CRC. Depending on the system time the virus displays the message:
This is Leonardo - another virus Ninja Turtle
Press any keyall.

The virus also contains the text:
Origin :Slovakia (not Hungaria or Austria)

Leproso.1221

Description Leproso.1221

It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the beginning of .COM files (except COMMAND.COM) are executed or opened. While infecting the virus creates a temporary file. Depending on the system date it displays the message:
Felicitaciones su máquina esta infectada por el virus LEPROSO creado por
J.P.G., hoy es mi cumpleaños y lo voy a festejar formateando su rígido!!!
Byeall(Vamos Ñull que con Diego somos campeones)
CopyRight (C) 1993 hasta 2000, J.P.G., Rosario, Argentina

and then halts PC. The virus also contains the text strings:
Diego_es.NOB
MOC.DNAMMOC

Home