Virus Database

Win32.Drol.5337.c

Description Win32.Drol.5337.c

Win32.Drol.5337.c is a dangerous Win32 virus.
It searches the current directory, the Windows directory and the Windows system directory for PE EXE files, and infects them.
The virus is 5337 bytes in size.
When infecting files it writes itself to the end of the file and changes the name of the file section at random.
It does not infect already infected files.
The code contains errors which may corrupt files.
Payload
Depending on the date shown by the local system, the virus displays the message:
DROL v1.0


This is the DROL virus

copyright (C) Lord Julus / [SLAM]

written for funall ;-)
and change the shape of the mouse pointer.

Check other viruses! Be aware! Use Antiviral Software

Ani

Description Ani

It is a dangerous memory resident stealth boot virus. It hooks INT 13h and writes itself to the MBR sector of the hard drive and boot sectors of floppy disks that are accessed. The virus stores the original boot sector out of the "legal" disk area: on the track 80th. The INT 13h handler decrypts end displays the message once per hour, in case at this moment disk data are read or written:
CHUPACABRAS

The virus also contains the text string: 'ANI'.

Animals.2400.a

Description Animals.2400.a

These are benign memory resident polymorphic parasitic viruses. They do not install themselves memory resident if TBAV anti-virus TSR drivers are installed. The viruses hook INT 8 and 21h, and write themselves to the end of COM and EXE files that are executed. The viruses do not infect files if the file name contains the letters AV or AN (AVP, NAV, SCAN). They also do not infect anti-virus programs GUARD and F-PROT as well as KRNL?86 and several other utilities.
Depending on its random counter and system timer, the viruses cause the screen to blink. On the 25th of any month, except June, the viruses display the following message:
Toto je ostrá verze viru ANIMALS_97
Zastavte t rání zví at, sic se Vám to jednou v echno vrátí !!!
Zlej Králík
Zdravím: Mloka, Filtráka, POPa a v echny p+kn holky.

The viruses also contain the text strings:
TBMEMXXXTBCHKXXXTBDSKXXXTBFILXXX
-Díky V vojár

Home